Senior Advisor, Security Controls & Compliance

IHG Hotels & Resorts; Atlanta (GA); Hybrid; USD 120,000 - 170,000; Full time

Benefits offered by this job

Hybrid work schedule

Room discounts

Job summary

IHG Hotels & Resorts seeks a Senior Analyst IT Information Security to lead senior‑level security controls and compliance activities across regulatory programs including SOX, PCI, SWIFT, SOC 1/SOC 2, and privacy assessments. You will manage control library data, auditor engagement, and remediation efforts while partnering with GRC, ServiceNow, and security teams.

You’ll build relationships with senior control owners and external auditors, drive timely remediation, and contribute to control

Qualifications

• Bachelor’s or Master’s degree in IT, cybersecurity, audit, risk management, or equivalent.
• 5+ years of progressive experience in information security, IT audit, technology risk, compliance, controls management, or related governance roles.
• Experience coordinating audits and regulatory compliance across SOX, PCI, SWIFT, SOC 1/2, privacy, and related frameworks.
• Proven ability to translate audit requirements into actionable remediation actions and business impact.
• Experience with GRC platforms and evidence repositories such as ServiceNow.

Responsibilities

• Lead regulatory compliance programs and control portfolios across multiple frameworks.
• Serve as senior control advisor and escalation point for stakeholders and auditors.
• Coordinate audits, RFIs, walkthroughs, findings, and remediation tracking.
• Maintain and improve control scope, documentation, and library data with cross‑functional teams.
• Build relationships with control owners and external audit partners to drive accountability.
• Identify root causes and coordinate remediation plans for control gaps.
• Provide concise status updates on audit progress for executives.
• Support automation and monitoring initiatives to align with regulatory needs.

Skills

SOX compliance

PCI

SOC 1/2

SWIFT

Privacy

Audit coordination

GRC

ServiceNow

Axonius

Stakeholder management

Education

Bachelor’s or Master’s in IT/Security

Tools

ServiceNow

Axonius

Job description

As the Senior Analyst IT Information Security responsible for leading senior-level security controls and compliance activities across regulatory and audit programs, including SOX, PCI, SWIFT, SOC 1/SOC 2, privacy-related assessments, and control management. This role provides control advisory support, coordinates auditor and stakeholder engagement, manages RFIs and findings, maintains compliance scope and control documentation, and drives timely remediation of control gaps.

Your Day To Day

• Lead assigned regulatory compliance programs and control portfolios across SOX, PCI, SWIFT, SOC 1/SOC 2, privacy, and other security control areas, ensuring scope, inventories, evidence expectations, and audit timelines are clearly defined and actively managed.
• Serve as senior control advisor and escalation point for assigned stakeholders, compliance partners, and delivery resources, providing guidance on control design, operating effectiveness, audit response quality, and remediation approach.
• Manage auditor coordination, RFIs, walkthroughs, findings, and remediation tracking by holding auditors and control owners accountable to milestones, improving quality of responses, and ensuring issues are escalated early with clear risk and impact framing.
• Maintain and improve compliance scope, control documentation, and control library data in partnership with GRC, ServiceNow, Axonius, Technology, and Security teams, ensuring control attributes, scope tags, ownership, and evidence requirements remain current and audit-ready.
• Build strong relationships with VP-level control owners, BISOs, Privacy, Financial Governance, Security Architecture, GIO, GPP, Product & Technology, and external audit partners to identify risks, resolve control gaps, and promote accountability for compliance outcomes.
• Support regulatory transformation and recurring gap remediation by identifying root causes, developing practical remediation plans, coordinating cross-functional follow-up, and helping implement sustainable control improvements.
• Provide concise status reporting and executive-ready updates on audit progress, RFIs, findings, indicators, risks, issues, decisions needed, and upcoming milestones for Director, SVP, CISO, and stakeholder reporting.
• Contribute to control automation and continuous monitoring initiatives by identifying candidate controls, validating business requirements, and ensuring automated indicators and dashboards support regulatory and operational compliance needs without owning the continuous controls monitoring capability.

What We Need From You

• Bachelor's or Master's Degree in Computer Information Systems, Information Technology, Cybersecurity, Business, Audit, Risk Management, or equivalent years of relevant work experience.
• 5+ years of progressive experience in information security, IT audit, technology risk, compliance, controls management, or related technology governance roles.
• Experience coordinating internal or external audits and regulatory compliance activities across frameworks such as SOX, PCI, SWIFT, SOC 1, SOC 2, privacy, NIST, ISO, COBIT, or related control frameworks.
• Demonstrated experience working with auditors, control owners, technology leaders, and cross-functional teams to manage RFIs, walkthroughs, findings, remediation, and executive reporting.
• Strong working knowledge of IT general controls, application controls, infrastructure controls, identity and access controls, change management, vulnerability management, incident management, and compliance evidence expectations.
• Ability to interpret audit requirements, challenge auditor requests where appropriate, and translate complex control topics into clear business impacts and remediation actions.
• Experience maintaining compliance scope, control inventories, control ownership, and evidence repositories in GRC or related platforms such as ServiceNow.
• Strong written and verbal communication skills, including the ability to prepare concise updates for Director, SVP, CISO, VP, auditor, and stakeholder audiences.
• Strong attention to detail, judgment, accountability, stakeholder management, and ability to operate independently in a complex, global environment.
• Working knowledge of control automation, indicators, dashboards, and analytics sufficient to support continuous monitoring initiatives and ensure outputs align to regulatory and audit needs.

Travel - 10%

Location - Our hybrid work structure is an expectation of three (3) days a week in office. This expectation may be adjusted to evolve with the changing needs of the business.

At IHG Hotels & Resorts, we work together to deliver True Hospitality for Good on a global scale. With corporate offices and over 6,000 hotel destinations worldwide, a career at IHG is the perfect way to broaden your horizons. You’ll experience our unique culture and brilliant colleagues who will support and inspire you. With a host of corporate opportunities to choose from, wherever you are on your career journey, and whatever you want to achieve there’s Room for You at IHG.

Over recent years, we’ve transformed our company. We have bold ambitions to drive performance and maintain our relentless focus on growth in order to be the hotel company of choice that guests & owners love.

We are a hospitality business at our core and value connections and being together helps us foster a unique sense of belonging that also supports productivity. That’s why here at IHG, we give our colleagues flexibility and balance – working in a hybrid way, blending office and remote working collectively. We recognise that every role is different, that’s why leaders work with teams to determine how and when they collaborate.

We provide a wide range of benefits designed to help you live your best work life. These include impressive room discounts across our many properties, recharge days and volunteering days throughout the year. Through our myWellbeing framework, we are committed to supporting wellbeing in your health, lifestyle, and workplace. We offer a unique and inclusive culture, where there is always Room for You to belong, grow and make a difference.

Our mission is to welcome everyone and create inclusive teams where we celebrate difference and encourage colleagues to bring their whole selves to work. IHG Hotels & Resorts provides equal employment opportunities to applicants and employees without regards to race, color, religion, sex, sexual orientation, gender identity, national origin, protected veteran status, disability, or any other category protected by applicable laws. We promote a culture of trust, support, and acceptance. Always welcoming different backgrounds, experiences, and perspectives.

Important information

• The salary range listed is the lowest to highest pay scale we, in good faith, believe we would pay for this role at the time of this posting. We may ultimately pay more or less than the posted range, and the range may be modified in the future. An employee’s pay position within the pay range will be based on several factors, including relevant education, qualifications, certifications, experience, skills, seniority, geographic location, performance, shift, travel requirements, sales or revenue-based metrics, and business or organizational needs.
• No amount of pay is considered to be wages or compensation until it is earned, vested, and determinable. The amount and availability of any bonus, commission, or other form of compensation allocable to a particular employee remain in the Company's sole discretion unless and until paid and may be modified at the Company’s sole discretion, consistent with the law.
• EEO Is The Law - click here for more information about Equal Opportunity Employer Minorities/Women/Protected Veterans/Disabled/Sexual Orientation/Gender Identity.
• If you require reasonable accommodation during the application process, please click here.
• IHG does not accept applications, inquiries, or unsolicited CVs/resumes from staffing or recruiting agencies. Please click here for our agency policy.
• If you are a resident of or applying to a job opening in the State of Washington, please click here to read about applicable benefits.