Director IT Security

Yearly

Highgate is a leading real estate investment and hospitality management company with over $15 billion of assets under management and a global portfolio of more than 400 hotels spanning North America, Europe, the Caribbean, and Latin America. With a 30-year track record as an innovator in the hospitality industry, this forward-thinking company provides expert guidance through all stages of the property cycle, from planning and development through recapitalization or disposition.

Highgate continues to demonstrate success in developing a diverse portfolio of bespoke lifestyle hotel brands, legacy brands, and independent hotels and resorts, featuring contemporary programming and digital acumen. The company utilizes industry-leading revenue management tools that efficiently identify and predict evolving market dynamics to drive out performance and maximize asset value. With an executive team of seasoned hospitality leaders and corporate offices worldwide, Highgate is a trusted partner for top ownership groups and major hotel

Highgate Corporate Offices Irving, TX

The Director of IT Security will oversee all security responsibilities for both the hotel level and corporate operations. The position will require both a technical understanding and a comprehension of modern security practices. Activities would include executive level security briefings, control of security training programs, management of our PCI control program and developing and implementing security best practices across all systems.

This position is based in Irving, Texas.

• Collaborate with the CISO and partner with executives and their direct leadership teams to build robust Security roadmaps and plans.
• Collaborate and oversight of multiple Managed Security Services Partner's.
• Champion security practices and major security & compliance initiatives.
• Work closely with Enterprise Risk Management to create quarterly, annual, and long-term security and risk management goals.
• Articulate strategies, define metrics, and provide necessary updates to executive leadership.
• Lead audit responses to 3rd party owner auditors, regarding IT security controls.
• Partner with business unit leadership for the development, planning, and execution of major security initiatives.
• Develop and maintain an asset prioritization program according to an asset’s risk and business impact.
• Constantly updates the cybersecurity and information security strategies to address new threats.
• Maintain a multi-year cybersecurity and information security roadmap with key performance indicators focused on reducing risk.
• Ensure the development and implementation of an ongoing employee and member security awareness program.
• Produce and maintain security policies and identifies area where new polices are needed.
• Directs development and execution of an enterprise-wide Incident Response Plan.
• Oversees and prepares the security budget.
• Stay abreast of latest security news and trends to guide the mitigation of threats.
• Other duties as assigned.

• BS in Computer Science, Information Technology, Engineering, or related field.
• 6+ years of security experience with 2+ years of senior leadership experience.
• Demonstrated ability in a combination of risk management, information security, and engineering roles.
• Must have experience and knowledge of working with PCI standards.
• Ability to identify, attract, hire, develop, and retain the best security professionals needed to staff a world class organization and ensure they have the vision, plan, support, and culture in place to deliver impact.
• Domain expert on the threat landscape and innovative security strategies and products.
• “Hands-on” operating style and approach but a view…