Manager, Information and Cyber Security - Incident Response

Your Day to Day

• Manage cyber security incident response, security investigations, and Information Security risk processes, including the coordination of complex incidents, and communicate risks, business impacts, and recommended actions to Senior Management.
• Recommend and implement changes in security technology and practices in accordance with industry standards and best practices, including opportunities to leverage automation and technology to improve incident response and related security capabilities. Manage global technology strategies to address security objectives.
• Provide technical advisory services to business and technology teams concerning security controls and security incidents. Identify opportunities to improve incident response and related security capabilities through process, technology, and automation.
• Create and review standards, guidelines, incident response playbooks, workflows, and procedures to meet IHG Information Security Policies as well as regulatory requirements. Evaluate vendors for new and existing solutions to assist in providing security assurance functions. Manage external teams conducting security assessments and network penetration testing. Conduct business analysis to assist business units in integrating security into their work. Assess and communicate any and all security risks associated with any and all purchases or practices performed by the company.
• Recommend and implement changes in security policies and practices in accordance with risks identified and regulatory requirements. Independently provide solutions to security problems in a cost-effective manner, including the application of automation, workflow, and emerging technologies to improve operational effectiveness.
• Assist in developing and executing security awareness training. Audit the proper administration of all computer security systems and their corresponding or associated software. Promote and oversee strategic security relationships between internal resources and external entities, including government, vendors, and partner organizations.
• Review regional standards, procedures, and controls on an annual basis to ensure they align with policy published by the Global Technology Enterprise Architecture (EA) team. Develop, manage, and maintain processes to ensure centrally managed services and solutions are compliant, including the tracking of all supporting reporting activities.

What We Need From You

• Bachelor's or Master's Degree in a relevant field of work or an equivalent combination of education and work-related experience. Highly Desired Certification: CISSP Preferred Certifications: CISA, CRISC, SANS, ISA, ISC2
• Typically, a minimum of 10 years of progressive work-related experience with demonstrated proficiency in multiple disciplines, technologies, or processes related to the position, preferably including cyber security incident response, security operations, or security investigations.
• Advanced knowledge of privacy and regulatory compliance including information security enterprise risk assessments, PCI remediation, data protection and strategy
• Advanced knowledge of preventative security controls, particularly in relation to protecting applications and data (i.e., firewalls, IDS/IPS, WAFs, anti-malware systems, cross-site scripting libraries, etc.)
• Advanced knowledge of security processes such as cyber security incident response, security investigations, vulnerability management, and risk assessment, knowledge of SOX, SOC, PCI, and regulatory security audit programs and audit procedurek, knowledge of operating system security controls (e.g., Windows, Linux, Unix), and advanced knowledge of IP networking and network protocols, architecture, and concepts, including their application to security investigations and incident response
• Understanding of business and information technology and security management processes. Strongly prefer experience with security automation, scripting, workflow development, or orchestration technologies, with demonstrated ability to apply technology to improve incident response and other security operations. 
• Advanced knowledge of design and development processes and business requirements analysis. Demonstrated project management experience in organizing, planning, and executing large-scale projects and security capability improvements from conception through implementation

Travel: 10% 

Location - Atlanta, GA: Our hybrid work structure is an expectation of three (3) days a week in office. This expectation may be adjusted to evolve with the changing needs of the business.