Director, Information Security - Analytics Platform and Automation

$110,550 - $245,238/Yr

Marriott International - Saint Paul, MN

Full-time - Manager

Hybrid - Saint Paul, MN

Accommodation

About the position

We are seeking an experienced Cybersecurity Director to lead our organization's efforts in developing and maintaining robust analytical platforms for advanced threat detection and prevention. This leader will oversee SIEM and UEBA platform engineering and delivery of Security Orchestration and Automated Response (SOAR) services to incident response personnel as well as operational monitoring of these critical services. A successful leader will maintain a focus on innovation, collaboration, and continuous improvement to ensure engineering and automation services effectively support our partners in Cybersecurity Operations. The Cybersecurity Director will define strategies for the delivery of SOAR services to drive incident response efficiency. This role involves working with partner functions to ensure overall operations and lifecycle management of SIEM, UEBA, and SOAR platforms align with the overall organizational strategy and goals. The director will manage teams of SIEM and UEBA Engineers, SOAR developers, and operational support personnel, fostering a culture of continuous improvement by encouraging team members to share ideas, learn from each other, and strive for excellence in their work. In addition, the director will identify and remediate issues with service performance, configuration, integrations, and availability. They will also identify opportunities to automate incident response work to reduce the incident response burden and socialize issues with stakeholders to drive changes that improve the organizational security posture. Continuous monitoring of industry trends, emerging technologies, and leading platforms related to cyber analytics services and SOAR services will be essential to identify opportunities for service performance improvement and new feature offerings that enhance security posture and support organizational cybersecurity strategy. Regular progress updates and reports to leadership will be required, highlighting key achievements, challenges, and areas for improvement for SOAR, analytics platforms, and platform operations. The director will also be responsible for budgeting and expense management, developing business cases for new initiative proposals, and managing service and initiative budgets. Ensuring compliance with applicable regulations and corporate policies will be a critical aspect of this role, as will providing support to partner functions to meet audits and compliance objectives.

Responsibilities

• Develop and implement strategies for delivery of SOAR services to drive incident response efficiency.
• Manage teams of SIEM and UEBA Engineers, SOAR developers, and operational support personnel.
• Identify and remediate issues with service performance, configuration, integrations, and availability.
• Identify opportunities to automate incident response work to reduce incident response burden.
• Work with key stakeholders to ensure that services and deliverables align with organizational goals and objectives.
• Continuously monitor industry trends, emerging technologies, and leading platforms related to cyber analytics services and SOAR services.
• Provide regular progress updates and reports to leadership, highlighting key achievements, challenges, and areas for improvement.
• Develop business cases for new initiative proposals and budget planning.
• Manage service and initiative budget including expense reports, service invoices, accruals, and forecasting.
• Ensure service management and deliverables comply with applicable regulation and corporate policies.

Requirements

• Bachelor's degree in computer sciences, related field or equivalent experience and certification.
• 8+ years of collective experience in cybersecurity roles.
• 5+ years experience managing security engineering, IT systems engineering or similar functions.
• Working knowledge of Information technology lifecycle management.
• Working knowledge of software development lifecycle management.
• Current information security management certification such as CISSP or CISM.

Nice-to-haves

• Certified Information Systems Security Professional (CISSP)
• Certified Information Security Manager (CISM)
• Other current security and IT certifications such as GIAC Security Essentials Certification (GSEC), SANS GIAC Incident Handler Certification (GCIH), IT Technical Library (ITIL 4) certification.
• Familiarity with industry-standard security frameworks such as ISO 27001, NIST Cybersecurity Framework, CIS Critical Security Controls, MITRE ATT&CK.

Benefits

• Medical, dental, and vision coverage.
• Health care flexible spending account.
• Dependent care flexible spending account.
• Life insurance and disability insurance.
• Accident insurance.
• Adoption expense reimbursements.
• Paid parental leave.
• Educational assistance.
• 401(k) plan and stock purchase plan.
• Discounts at Marriott properties.
• Commuter benefits.
• Employee assistance plan.
• Childcare discounts.