Manager| Global Information Security| APEC – Singapore Regional Office


Job Number 20005017
Job Category Information Technology
Location Singapore Regional Office| 2 Harbourfront Place #06-08|
Singapore| Singapore| Singapore
Brand Corporate
Schedule Full-time
Relocation? No
Position Type Management

Start Your Journey With Us
Marriott International is the world’s largest hotel company| with more brands|
more hotels and more opportunities for associates to grow and succeed. We
believe a great career is a journey of discovery and exploration. So| we ask|
where will your journey take you?


The Continent Information Security Partnerships position drives continent
security program| policy| and project execution providing leadership and
direction to above property and on property teams. The position strives for
outstanding security compliance status and ensures that Security
implementations within the continent follow company security standards. The
role will track and report on established security metrics to Senior GIS and
Continent leaders and will have a direct reporting line to the Director|
Continent Information Security Partnerships. This position maintains strong
relationships with continent IT operations and Field IT Manager and is the
point of contact working with them to liaise with additional teams within


Education and Experience Required Qualifications:

5+ years Information Technology| IT Security| and/or IT project management experience

3+ years in executing technology plans and/or project portfolios or information security programs

2+ years’ implementing enterprise security risk management frameworks and processes.

Fluent in English| both spoken and written.

Bachelor’s Degree| or the equivalent combination of education| technical training| certification or work/military experience

Preferred Qualifications:

5+ years experience in hotel IT Management.

4+ years’ experience working with business and iT partners.

Current information security certification| including Certified Information Security Manager (CISM)| Certified Information Systems Auditor (CISA) or Certified Information Systems Security Professional (CISSP)

4+ years experience in Cybersecurity response and remediation

Demonstrated understanding of key network and technical security controls.

Experience participating in and coordinating activities for security incident response.

Knowledge of global regulatory standards to include GDPR and understanding of PCI DSS

Demonstrated ability to apply GIS policies at a discipline unit level.

Knowledge of IT security within an infrastructure environment.

Knowledge of business environment| service requirements and hospitality culture.

Experience in business systems and process planning.

Graduate/post graduate degree.



Leads Security project implementations within a designated continent partnering with the respective above property and property IT teams.

Develops and delivers tactical communications| issues remediation planning| and implementation timelines with the continent IT Operations and Global Information Security teams.

Initiates and completes audit programs including tracking of progress| results| and gaps remediation. Shares with GIS and continent partners and leads follow ups| such as IPPA| IT Peer Review| and PCI.

Represents Security in signing off on new property openings including tracking that property systems and security readiness is registered| to include application inventory

Identifies learning and knowledge gaps and facilitates educational calls| materials and meetings to the Continent IT Operations and field associates

Plans and leads security reviews/certifications for new systems and services for properties across an assigned continent.

Performs first line approval of security requests from the partners and presents to leadership for additional approvals

Key contact for security compliance partnering with IT continent and global GIS teams. Tracks compliance of the continent and works with on property IT associates along with the Area IT Managers towards issues remediation| providing necessary escalations and follow ups to the respective teams.

Partners with Cyber Incident Response Team during incident response and remediation with their respective continent

Point of contact for general questions and queries around global IT security programs| policies| procedures| and/or strategy.