Manager, Information and Cyber Security - Incident Response

IHG Hotels; Georgia; On-site; USD 120,000 - 180,000; Full time

Job summary

IHG Hotels is seeking a Manager IT Information Security to lead the Cyber Security Incident Response Team, coordinating responses to incidents and driving continuous improvement of incident response capabilities. You will work with global teams to address security gaps and ensure governance across IT systems and business processes.

The role requires deep expertise in incident response, security operations, and risk assessment, with a focus on automation, policy alignment, and regulatory

Qualifications

• Bachelor's or Master's Degree in a relevant field or equivalent experience.
• CISSP preferred; CISA/CRISC/SANS/ISA/ISC2 certifications are highly regarded.
• 10+ years of progressive experience in cyber security incident response, security operations, or investigations.

Responsibilities

• Lead and coordinate cyber security incident response and investigations.
• Communicate risk, business impact, and recommended actions to Senior Management.
• Recommend and implement improvements to security controls, automation, and processes.
• Develop and maintain incident response playbooks, workflows, and procedures.
• Evaluate vendors and manage external teams conducting security assessments and testing.

Skills

Incident response

Security investigations

Risk management

Security operations

Automation

Vendor management

Project management

Education

Bachelor's or Master's Degree in a relevant field

Job description

IHG is seeking a Manager IT Information Security that will be responsible for supporting IHG's Cyber Security Incident Response Team (CSIRT), including leading and coordinating the response to cyber security incidents and driving continuous improvement of incident response processes and capabilities to reduce business impact and strengthen organizational resilience. In this role, you will work across business and technology teams to identify and address security and risk gaps in IT systems and business processes globally, including the development of appropriate controls. The Manager IT Information Security will communicate security risks, incident impacts, and recommended actions to Senior Management.

Your Day to Day

Manage cyber security incident response, security investigations, and Information Security risk processes, including the coordination of complex incidents, and communicate risks, business impacts, and recommended actions to Senior Management.

Recommend and implement changes in security technology and practices in accordance with industry standards and best practices, including opportunities to leverage automation and technology to improve incident response and related security capabilities. Manage global technology strategies to address security objectives.

Provide technical advisory services to business and technology teams concerning security controls and security incidents. Identify opportunities to improve incident response and related security capabilities through process, technology, and automation.

Create and review standards, guidelines, incident response playbooks, workflows, and procedures to meet IHG Information Security Policies as well as regulatory requirements. Evaluate vendors for new and existing solutions to assist in providing security assurance functions. Manage external teams conducting security assessments and network penetration testing. Conduct business analysis to assist business units in integrating security into their work. Assess and communicate any and all security risks associated with any and all purchases or practices performed by the company.

Recommend and implement changes in security policies and practices in accordance with risks identified and regulatory requirements. Independently provide solutions to security problems in a cost-effective manner, including the application of automation, workflow, and emerging technologies to improve operational effectiveness.

Assist in developing and executing security awareness training. Audit the proper administration of all computer security systems and their corresponding or associated software. Promote and oversee strategic security relationships between internal resources and external entities, including government, vendors, and partner organizations.

Review regional standards, procedures, and controls on an annual basis to ensure they align with policy published by the Global Technology Enterprise Architecture (EA) team. Develop, manage, and maintain processes to ensure centrally managed services and solutions are compliant, including the tracking of all supporting reporting activities.

What We Need From You

• Bachelor's or Master's Degree in a relevant field of work or an equivalent combination of education and work-related experience. Highly Desired Certification: CISSP Preferred Certifications: CISA, CRISC, SANS, ISA, ISC2
• Typically, a minimum of 10 years of progressive work-related experience with demonstrated proficiency in multiple disciplines, technologies, or processes related to the position, preferably including cyber security incident response, security operations, or security investigations.
• Advanced knowledge of privacy and regulatory compliance including information security enterprise risk assessments, PCI remediation, data protection and strategy
• Advanced knowledge of preventative security controls, particularly in relation to protecting applications and data (i.e., firewalls, IDS/IPS, WAFs, anti-malware systems, cross-site scripting libraries, etc.)
• Advanced knowledge of security processes such as cyber security incident response, security investigations, vulnerability management, and risk assessment, knowledge of SOX, SOC, PCI, and regulatory security audit programs and audit procedurek, knowledge of operating system security controls (e.g., Windows, Linux, Unix), and advanced knowledge of IP networking and network protocols, architecture and concepts, including their application to security investigations and incident response
• Understanding of business and information technology and security management processes. Strongly prefer experience with security automation, scripting, workflow development, or orchestration technologies, with demonstrated ability to apply technology to improve incident response and other security operations.
• Advanced knowledge of design and development processes and business requirements analysis.
• Demonstrated project management experience in organizing, planning, and exec