Compensation Type

Highgate Hotels

Highgate is a premier real estate investment and hospitality management company widely recognized as an innovator in the industry. Highgate is the dominant player in U.S. gateway markets including New York, Boston, Miami, San Francisco and Honolulu, with a rapidly expanding presence in Europe, Latin America, and the Caribbean. Highgate’s portfolio of global properties represents an aggregate asset value exceeding $20B and generates over $5B in cumulative revenues. The company provides expert guidance through all stages of the hospitality property cycle, from planning and development through recapitalization or disposition. Highgate also has the creativity and bandwidth to develop bespoke hotel brands and utilizes industry leading proprietary revenue management tools that identify and predict evolving market dynamics to drive out performance and maximize asset value. With an executive team consisting of some of the industry’s most experienced hotel management leaders, the company is a trusted partner for top ownership groups and major hotel brands. Highgate maintains corporate offices in London, New York, Dallas, and Seattle. www.highgate.com 

Location

Highgate Corporate Offices Irving, TX

Overview

The Director of IT Security will oversee all security responsibilities for both the hotel level and corporate operations. The position will require both a technical understanding and a comprehension of modern security practices. Activities would include executive level security briefings, control of security training programs, management of our PCI control program and developing and implementing security best practices across all systems.

Responsibilities

• Collaborate with the CIO and partner with executives and their direct leadership teams to build robust Security roadmaps and plans. 
• Collaborate and oversight of multiple Managed Security Services Partner's. 
• Champion security practices and major security & compliance initiatives. 
• Work closely with Enterprise Risk Management to create quarterly, annual, and long-term security and risk management goals. 
• Articulate strategies, define metrics, and provide necessary updates to executive leadership. 
• Lead audit responses to 3rd party owner auditors, regarding IT security controls.
• Partner with business unit leadership for the development, planning, and execution of major security initiatives. 
• Develop and maintain an asset prioritization program according to an asset’s risk and business impact. 
• Constantly updates the cybersecurity and information security strategies to address new threats. 
• Maintain a multi-year cybersecurity and information security roadmap with key performance indicators focused on reducing risk. 
• Ensure the development and implementation of an ongoing employee and member security awareness program. 
• Produce and maintain security policies and identifies area where new polices are needed. 
• Directs development and execution of an enterprise-wide Incident Response Plan. 
• Overseas and prepares the security budget. 
• Stay abreast of latest security news and trends to guide the mitigation of threats. 
• Other duties as assigned. 

Qualifications

• BS in Computer Science, Information Technology, Engineering, or related field. 
• 10 years of security experience with 3 years of senior leadership experience at the executive level.
• Demonstrated ability in a combination of risk management, information security, and engineering roles. 
• Ability to identify, attract, hire, develop, and retain the best security professionals needed to staff a world class organization and ensure they have the vision, plan, support, and culture in place to deliver impact. 
• Domain expert on the threat landscape and innovative security strategies and products. 
• “Hands-on” operating style and approach but a view towards the future and willingness to invest in people development and in developing an organization that will support a large company. 
• Proven experience as a business-focused, change-driven, credible leader in a fast-growing business. 
• Expertise in understanding sophisticated technology & applying it in a practical way to build solutions. 
• Knowledge of IT control frameworks with experience in implementation of the following examples (ISO, NIST, PCI, ITIL).