Senior Manager, Cybersecurity Vulnerability Management Data Analytics

at Marriott in Boise, Idaho, United States

Job Number 23138589

Job Category Information Technology

Location Marriott International HQ, 7750 Wisconsin Avenue, Bethesda, Maryland, United States

Schedule Full-Time

Located Remotely? Y

Relocation? N

Position Type Management

JOB SUMMARY

The Marriott Enterprise Vulnerability Management group oversees attack surface reduction across a wide range of corporate, cloud, data center, and property locations. Our team members are passionate about protecting our data, systems, and service delivery functions across the globe against a broad range of adversaries.

The Senior Manager, Vulnerability Management, Data Analytics and Reporting functions as an individual technical expert as part of a team that provides support to Vulnerability Management and remediation teams within the Marriott environment. The role ensures the effective use and distribution of vulnerability related data through the design of reporting strategies and the creation of reporting artifacts. It requires the ability to analyze enterprise Vulnerability Management Data and identify trends, problems, and areas of improvement. The successful candidate will have a working knowledge of the data lifecycle, including technical acquisition techniques, data cleanup, quality assessment, normalization, transformation, verification, and reporting. They will provide meaningful insight based on the data that will drive future Vulnerability Management efforts and provide recommendations to decision makers. The role will work with other data reporting professionals in information security and global technology to create consolidated reporting across these areas and to provide specialized reporting to meet specific objectives.

CANDIDATE PROFILE

Required Education and Experience:

+ Bachelor's degree in Information Assurance, Data Science, Statistics, Computer Science, or a related field, or the equivalent combination of experience and certifications

+ 7 years of experience in data analysis, visualization, and developing data-drive solutions

+ 4 years of experience in both of the following areas:

+ Analysis and reporting of information security data, preferably around Vulnerability Management

+ Use of data reporting and data visualization tools to communicate key decision making information to stakeholders, including Power BI, Excel, and PowerPoint

+ 2 years of experience with data acquisition techniques to collect data from remote data sources

Preferred Experience:

+ Firm understanding of Vulnerability Management concepts and principles

+ Experience with enterprise vulnerability reporting tools, such as Tenable.io or Kenna, and experience with vulnerability workflow solutions, such as ServiceNow and Jira

+ Strong analytical and problem solving skills

+ Proficiency with interacting with API data sources

+ Working knowledge of programming techniques with experience in automation, API access, and data management, preferably with Python

+ Proven experience with data enrichment involving SEIM solutions, CMDB, and other sources of asset, event, and state data

+ Experience applying statistical analysis to large data sets

+ Experience managing medium to large projects involving multiple teams in a technical lead role

+ Experience working in a scaled agile environment

+ Familiarity with attack and exploitation techniques involving operating systems, applications, and devices commonly seen in an enterprise environment

Expected Contributions

+ Analyze and report on enterprise Vulnerability Management Data from multiple sources in various formats as standalone or merged data sets

+ Improve reporting maturity through automation, consolidation, and other techniques as necessary

+ Participate in the development of ongoing vulnerability data management strategies

+ Develop insights that lead to short- and long-term improvements in the enterprise Vulnerability Management program

+ Communicate complex information to stakeholders in a concise and understandable manner

+ Analyze data to assist with identifying risk and prioritizing remediation efforts

+ Assist others with developing reporting and providing analysis around enterprise vulnerability data

+ Ensure that organization core values and culture are embedded into all aspects of the position's work.

+ Work with key stakeholders throughout the organization to build relationships based on an understanding of stakeholder needs and actions consistent with the company's service standards

+ Provide reporting and analysis to demonstrate program effectiveness, drive improvements in maturity and stakeholder awareness, and develop strategic improvements.

+ Guide and develop team members in data analysis and reporting skills

+ Use organizational assessment, reporting, workflow, and communications solutions to fulfill responsibilities of the role and of the team

+ Work with third-party providers to assess, report, remediate, and measure the effectiveness of team objectives

Maintaining Goals

+ Submits reports in a timely manner, ensuring delivery deadlines are met.

+ Promotes the documenting of project progress accurately.

+ Provides input and assistance to other teams regarding projects.

Managing Work, Projects, and Policies

+ Manages and implements work and projects as assigned.

+ Generates and provides accurate and timely results in the form of reports, presentations, etc.

+ Analyzes information and evaluates results to choose the best solution and solve problems.

+ Provides timely, accurate, and detailed status reports as requested.

Demonstrating and Applying Discipline Knowledge

+ Provides technical expertise and support to persons inside and outside of the department.

+ Demonstrates knowledge of job-relevant issues, products, systems, and processes.

+ Demonstrates knowledge of function-specific procedures.

+ Keeps up-to-date technically and applies new knowledge to job.

+ Uses computers and computer systems (including hardware and software) to enter data and/ or process information.

Delivering on the Needs of Key Stakeholders

+ Understands and meets the needs of key stakeholders.

+ Develops specific goals and plans to prioritize, organize, and accomplish work.

+ Determines priorities, schedules, plans and necessary resources to ensure completion of any projects on schedule.

+ Collaborates with internal partners and stakeholders to support business/initiative strategies

+ Communicates concepts in a clear and persuasive manner that is easy to understand.

+ Generates and provides accurate and timely results in the form of reports, presentations, etc.

+ Demonstrates an understanding of business priorities

Additional Responsibilities

+ Provides information to supervisors and co-workers by telephone, in written form, e-mail, or in person in a timely manner.

+ Demonstrates self-confidence, energy and enthusiasm.

+ Informs and/or updates leaders on relevant information in a timely manner.

+ Manages time effectively and conducts activities in an organized manner.

+ Presents ideas, expectations and information in a concise, organized manner.

+ Uses problem solving methodology for decision making and follow up.

+ Performs other reasonable duties as assigned by manager.

California Applicants Only: The salary range for this position is $93,713.00 to $204,107.00 annually.

Colorado Applicants Only: The salary range for this position is $93,713.00 to $185,551.00 annually.

New York City & Westchester County, NY Applicants Only: The salary range for this position is $113,393.00 to $204,107.00 annually.

Washington Applicants Only: The s