Sr Manager, Security GRC, GC

2 weeks ago


Shanghai, China Corporate Full time

JOB SUMMARY

The GC security GRC senior manager is a Shanghai-based position that is part of APAC GIS team and focuses on security governance, risk and compliance matters for GC region. This role is as a core member of the GRC team that will mature the Company’s cyber regulation compliance posture and ensure the day-to-day compliance for GC by collaborating within information security team and the broader business disciplines, such as IT, Digital, Legal, Government Affairs, etc.

The candidate will also be responsible for supporting the overall Asia Pacific security program including security policy, procedures, and standards, ensuring Marriott’s Global Technology documents are compliant with Marriott security policies and procedures, and reviewing documents for accuracy and completeness. 

CANDIDATE PROFILE 

Education and Experience 

Required:

7+ years progressive experience in related fields such as information security, cyber regulation compliance, IT audit etc. That also includes direct experience with: security tooling for logging, monitoring, alerting, and reporting Splunk) vulnerability management tools database security MySQL, SQL Server) mainstream security products Firewall, IDS/IPS, EPP/AV, SWG) main cloud/infrastructure and operation systems security domains AWS, Ali cloud, Unix/Linux, Windows) Must possess Chinese and English Language proficiency (reading/writing/speaking. Bi/multi-lingual skills)

Additional Preferred skills and experience:

Familiarity with security management of mainstream cloud platforms, such as Alicloud, Tencent, AWS etc. Familiarity with main China Cyber Security laws and data protection requirements, including MLPS, CBDT, PIPL etc. Bi/multi-lingual skills Experience in leading or participating in cyber incident response events. Industry certifications such as CISA, CISM, CISSP, PCI ISA etc. Knowledge of hospitality culture

Key Stakeholders

Singapore Security Center Continent Information Security Partnership GC IT leaders Hotel IT associates Global Information Security APAC Digital team APAC Legal team Other roles involved in data and system protection

CORE WORK ACTIVITIES 

Managing Projects and Priorities

Responsible for cyber regulation internal assessments and risk management based on China security law, data protection regulatory requirements etc. Partners with continent information security partnership team and cyber fusion center to maintain cyber regulation compliance monitoring mechanism for China. Manages and monitors the IT risk posture for hotel IT environment, cloud data platforms, web security, and digital channels. Coordinates or performs remediation activities identified from internal and external cyber regulation assessments. Performs regular cyber compliance metric reporting and monitor key risk indicators. Supports cyber incident response management by localizing the global incident response process to fit with regional purpose and coordinate simulations. Supports regulator inspections, coordinates submission preparation, and tracks remediations. Implements cyber regulation awareness program catering various roles in the entity. Monitors cyber threats, analyzes key risks related to cyber regulations, and defines solutions with wider IT and Security teams. Monitors compliance controls over key IT assets on daily basis. Perform regular Security Risk Assessment including 3rd Party risk assessment and review. 

Maintaining Goals

Submits reports in a timely manner, ensuring delivery deadlines are met. Promotes the documenting of project progress accurately. Provides input and assistance to other teams regarding projects.

Managing Work, Projects, and Policies 

Manages and implements work and projects as assigned. Generates and provides accurate and timely results in the form of reports, presentations, etc. Analyzes information and evaluates results to choose the best solution and solve problems. Provides timely, accurate, and detailed status reports as requested.

Demonstrating and Applying Discipline Knowledge 

Provides technical expertise and support to persons inside and outside of the department. Demonstrates knowledge of job-relevant issues, products, systems, and processes. Demonstrates knowledge of function-specific procedures. Keeps up-to-date technically and applies new knowledge to job. Uses computers and computer systems (including hardware and software) to enter data and/ or process information.

Delivering on the Needs of Key Stakeholders

Understands and meets the needs of key stakeholders. Develops specific goals and plans to prioritize, organize, and accomplish work. Determines priorities, schedules, plans and necessary resources to ensure completion of any projects on schedule. Collaborates with internal partners and stakeholders to support business/initiative strategies. Communicates concepts in a clear and persuasive manner that is easy to understand. Generates and provides accurate and timely results in the form of reports, presentations, etc. Demonstrates an understanding of business priorities.

Additional Responsibilities 

Provides information to supervisors and co-workers by telephone, in written form, e-mail, or in person in a timely manner. Demonstrates self-confidence, energy and enthusiasm. Informs and/or updates leaders on relevant information in a timely manner. Manages time effectively and conducts activities in an organized manner. Presents ideas, expectations and information in a concise, organized manner. Uses problem solving methodology for decision making and follow up. Performs other reasonable duties as assigned by manager.

  • Shanghai, China Corporate Full time

    JOB SUMMARYLead and manage security architecture and engineering team in Great China. Performs certification of Security Control attestations and evaluates the implementation of those controls in order to grant Approval to Operate for a release of new infrastructure, services, applications and processes into Marriott’s Production Environments in regional...


  • Shanghai, China Corporate Full time

    JOB SUMMARY The global distribution landscape in the lodging industry continues to expand and become more complex, and Marriott International recognizes the importance of the continued development and execution of a comprehensive channel distribution strategy with specific focus on the nuanced business needs of our global hotels portfolio. The Senior...


  • Shanghai, China Marriott International, Inc. Full time

    JOB SUMMARY[Location flexible in Hong Kong or Shanghai]The Manager – Brand Portfolio Activation and Standards (For Premium Brands) has three primary responsibilities;1. Co-develop strategic planning, activation, execution and communications for multi-Brands projects, initiatives and programming.2. Partner with Premium Brand Management Leaders and Regional...


  • Shanghai, China Corporate Full time

    JOB SUMMARYThe Senior Director, Loyalty Marketing, GC is a key member of GC Marketing team. The purpose of this position is to plan and execute continent loyalty and portfolio marketing in a manner that is locally relevant and aligned with the global strategy. He/she has responsibility for:• Loyalty program marketing to support drive loyalty program...


  • Shanghai, China Thermo Fisher Scientific Full time

    The Website Protection Engineer will be responsible for the ongoing security around all external facing application hosted on premise or external. Working with 3rd party services if needed to embed security controls onto their web platforms, and ensure all new external facing applications go through the A&A process, working with Network/IAM, application...


  • Shanghai, China thyssenkrupp Presta Shanghai Co Ltd Full time

    Your responsibilitiesJob Description: - Coordinating of all relevant security activities in the region and providing support / consultancy when needed - Frequent adjustment with and regular reporting to all relevant functions / departments / business partners - Organization and implementation of security-specific awareness measures at local sites -...

  • Software Engineer

    1 month ago


    Shanghai, China Electronic Arts Full time

    Job Title: Software Engineer (Backend Security)-Java FC Mobile Shanghai Studio is devoted to the development and operation of a high-quality mobile game with top sports IP as a global team. The team also continuously delivers fantastic game experience to global users. The quest for creativity, respect for autonomy, and emphasis on collaboration are at the...


  • Shanghai, China Lilly Full time

    We’re looking for people who are determined to make life better for people around the world. his Sr. Brand Manager will be able to: Discover and synthesize competition intelligence and customer insights, and contribute to the development and refinement of brand strategy and initiatives Identify and engage thought leaders in targeted therapeutic area,...


  • Shanghai, China Umicore Full time

    China - Shanghai - UIC Corporate Research & Development Engineering & Technology, Research & Development Posted on 10-04- About Umicore Reducing harmful vehicle emissions. Powering the cars of the future. Giving new life to used metals. We are the leading circular materials technology company fulfilling its mission to create materials for a better...


  • Shanghai, China STMicroelectronics Full time

    Job description We are seeking a highly skilled and experienced Security and Facility Manager to oversee the maintenance, operations, and security of our site in Shanghai and Beijing, include the remote office, such as Qindao, Xian, Nanjing, Wuhan, Hangzhou and Suzhou warehouse. This Security and Facility Manager will be responsible for ensuring the...


  • Shanghai, China Amazon Information Service (Beijing) Co., Ltd. (Shanghai Branch) Full time

    Amazon Ads helps brands design ad experiences that delight customers and deliver meaningful results. With 300+ million worldwide active customer accounts, and first-party insights based on shopping, streaming and browsing signals, brands can craft relevant campaigns that enhance customer experiences. Our solutions on Amazon.com, services like Twitch, IMDb...


  • Shanghai, China Coca Cola Full time

    Description Summary: DESCRIPTION & REQUIREMENTS: Position Overview: The Martech full stack tech, GC&M (Greater China & Mongolia) is primarily expected to design, supervise, and provide technical guidance over the solution architecture and engineering/tech excellence in building and operating scalable platform in the area like mini programs,...


  • Shanghai, China Roche Full time

    The Position Job Summary : Assist Principal or Lead engineer to provide IT product technical support for FSE (Field Service Engineer), customer and other department, ensure Roche instrument Service timely and efficient You will : Under independent or guidance, cooperate with FSE (Field Service Engineer), provide the level 2 technical...

  • Security Engineer

    4 weeks ago


    Shanghai, China Donaldson Full time

    Donaldson is committed to solving the world’s most complex filtration challenges. Together, we make cool things. As an established technology and innovation leader, we are continuously evolving to meet the filtration needs of our changing world. Join a culture of collaboration and innovation that matters and a chance to learn, effect change, and make...


  • Shanghai, China Bayer Full time

    At Bayer we’re visionaries, driven to solve the world’s toughest challenges and striving for a world where ,Health for all, Hunger for none’ is no longer a dream, but a real possibility. We’re doing it with energy, curiosity and sheer dedication, always learning from unique perspectives of those around us, expanding our thinking, growing our...


  • Shanghai, Shanghai, China Selby Jennings Full time

    Job responsibilities:Develop and implement a business plan for the private wealth team based on the overall development strategy of the company and department;Responsible for the business operations of the private wealth team, leading the team to achieve the operational targets set by the company;Lead the team to expand business, develop channels, improve...


  • Shanghai, China Selby Jennings Full time

    Job responsibilities:Develop and implement a business plan for the private wealth team based on the overall development strategy of the company and department;Responsible for the business operations of the private wealth team, leading the team to achieve the operational targets set by the company;Lead the team to expand business, develop channels, improve...

  • IT Security Officer

    3 weeks ago


    Shanghai, China Bureau Veritas Group Full time

    Job Purpose This position has an objective to Drive the implementation of Group IT Governance and Cyber Security Strategy across the region by assisting the OG CISO. Achieve and maintain IT compliance across the region as per group policies and IT standards and regulations. Minimize the cyber security threats and related risks across the region by...


  • Shanghai, China Siemens Healthineers Ltd. Full time

    Do you want to join us in helping to fight the world's most threatening diseases and enabling access to care for more people around the world? At Siemens Healthineers, we pioneer breakthroughs in healthcare. For everyone. Everywhere. We offer you a flexible and dynamic environment with opportunities to go beyond your comfort zone in order to grow...


  • Shanghai, China Bulgari Full time

    Position MISSION STATEMENT Maximize sales results and brand image via a dynamic management of the Jewelry assortment strategy, product forecast, sales performance and action plan for Greater China. Execute GC Category budget with alignment across GC markets. MAIN RESPONSABILITIES Define Store assortment according to Store cluster and...