Director of Information Security

Full-Time

Sage Hospitality Group is set to hire a Director of Information Security�to join us!

�

As part of Sage Hospitality Group, we passionately strive to be the best and create excellence in everything we do. We believe in enriching lives one experience at a time. More than a slogan, we empower our employees to make positive impacts on the communities in which we live and work. By providing genuine service we build relationships with our guests and value for our shareholders, and we create unforgettable experiences.

�

We are looking for independent thinkers. Those who harness their entrepreneurial spirit so that it breaks preconceived notions. We’re not afraid to forge our own path. After all, it’s what industry leaders do. That’s why we welcome risk takers and creative spirits alike. No matter your daily role, Sage recognizes that your success is about more than the work you do—it’s really about who you are, which is why we invest in your personal and professional growth. We hope you consider joining us!

The Director of Information Security is responsible for establishing and maintaining the enterprise vision, strategy, and program to ensure information assets and technologies are adequately protected. The individual in this role will have experience maturing and building a security program, oversee a team of IT security professionals, manage risks related to information security, and lead efforts to mitigate cyber threats, respond to incidents, and ensure compliance with relevant regulations and standards.

�

� Strategic Planning: Develop, implement, and monitor a strategic, comprehensive enterprise information security and IT risk management program.

� Security Operations: Oversee the management and operations of IT security infrastructure and applications, including firewalls, intrusion detection systems, SIEM, MDR, EDR and more.

� Policy Development: Develop and enforce security policies, procedures, and guidelines to protect organizational data, systems, and networks.

� Risk Management: Conduct regular risk assessments, vulnerability scans, and penetration testing to identify and mitigate risks to information systems.

� Incident Response: Lead the response to information security incidents, including the investigation, analysis, and remediation of security breaches and vulnerabilities.

� Compliance and Audit: Ensure compliance with industry standards, regulatory requirements, and best practices (e.g., GDPR, CPRA, PCI, NIST, CIS,).

� Team Leadership: Build and lead a high-performing information security team by recruiting, training, and mentoring staff.

� Collaboration: Collaborate with IT and business leaders to align security strategies with organizational goals and objectives.

� Budget Management: Develop and manage the budget for the information security department, ensuring cost-effective use of resources.

� Education and Awareness: Promote information security awareness and training programs across the organization to reduce risks related to human error

�

OTHER RESPONSIBILITIES

� All other duties as assigned, requested or deemed necessary by management.

Education/Formal Training

Bachelor’s degree in computer science, Information Systems, Cybersecurity, or a related field.

�

Experience

10+ years of experience in IT security, including 5+ years in a leadership role.

�

Knowledge/Skills

� Certifications: Certified Information Systems Security Professional (CISSP), Certified Information Security Manager (CISM), or other relevant certifications.

� Technical Skills: Deep understanding of information security frameworks, such as NIST, ISO 27001, and CIS Controls. Proficiency in security technologies, including firewalls, VPNs, IDS/IPS, SIEM, MDR, EDR and IAM.

� Soft Skills: Strong leadership, communication, and interpersonal skills. Ability to influence and collaborate with stakeholders at all levels.

� Problem-Solving: Excellent analytical and problem-solving skills with keen attention to detail.

� Project Management: Experience managing large-scale security projects, from inception to completion.

� Experience in hospitality or retail is preferred

�

Physical Demands

The physical demands described here are representative of those that must be met by an associate to successfully perform the essential functions of this job. Reasonable accommodations may be made to enable individuals with disabilities to perform the essential functions.

� Must have vision ability in order to visually inspect hotel.

� Must have mobility to walk through the front and the back of the hotel.

� Climbing approximately 20-30 steps 10% of the week.

� Physically able to regularly inspect all areas of interior and exterior of facility.

�

Environment

General office and hotel environment

• Eligible to participate in Sage bonus plan

• Unlimited paid time off

• Medical, dental, vision insurance

• Eligible to participate in the Company’s 401(k) program with employer matching

• Health savings and flexible spending accounts

• Basic Life and ADD insurance

• Company-paid short-term disability

• Paid FMLA leave for up to a period of 12 weeks

• Employee Assistance Program

• Great discounts on Hotels, Restaurants, and much more.

• Eligible to participate in the Employee Referral Bonus Program. Up to $1,000 per referral.

**�The application period will be open for approximately 30 days or until a suitable candidate is identified. We encourage qualified individuals to submit their applications within this timeframe.