Chief Info Security Officer (CISO)

Chief Information Security Officer (CISO)

As the #1 leader in hospitality worldwide, Marriott International has nearly 40 brands and over 9,800 hotels in its portfolio across 145 countries — and we're still growing. By joining Marriott, you can be a part of something bigger than yourself, be inspired by what's possible and discover your own future as we continue to undertake the industry's largest digital and technology transformation that will allow us to maintain our position as the industry leader in travel and hospitality for years to come. The patent-pending platforms and architecture is built with secure by design, trust by design principles. Come build what's next.

As a critical member of the senior technology leadership team, the Chief Information Security Officer (CISO) defines, leads, and executes the enterprise-wide information security, governance, risk, compliance and trust strategy to protect the company's digital assets, technology platforms, brand reputation, and customer trust in an increasingly AI-enabled world. This executive establishes and operationalizes a Trust and Security by Design model—ensuring security, privacy, resilience, and ethical use of technology are embedded into every product, platform, and digital experience as well as the culture of how we work. They are also accountable for leading all Board-level engagement on information security with Marriott's BOD technology subcommittee, instilling confidence in our current and continually evolving cybersecurity strategy.

The CISO is accountable for evolving the organization's cybersecurity posture through intelligent automation, advanced analytics, and AI driven security capabilities, enabling proactive risk reduction, faster threat detection and response, and scalable governance across a global, decentralized environment. The CISO will be accountable for a forward-thinking and resilient Information Security Program, Governance, Risk, and Compliance (GRC), Identity and Access Management (IAM), Security Architecture and Strategy and Security Operations Center (SOC).

Serving as the strategic leader for cyber risk, regulatory compliance, and digital trust, the CISO partners closely with IT, Legal, HR, Compliance, Data Privacy, and business leaders to align security outcomes with business priorities. This executive sets the tone for a culture of security consciousness, responsible AI use, and continuous improvement—anticipating emerging threats and embedding modern, automated defenses to protect the company's future. The role reports to the Chief Information Officer.

Candidate Profile

Education and Experience

Required:

• Bachelor's degree in information security, Computer Science, or related field.
• 15+ years of progressive cybersecurity experience with at least 10 years in a senior leadership role that reflects significant people and financial management experiences and leading through a range of moments from crisis to driving change.
• Demonstrated success leading enterprise information security programs and teams.
• Demonstrated experience applying AI, machine learning, and automation to cybersecurity operations, risk management, or governance at enterprise scale.
• Proven leadership embedding security by design and privacy by design principles into digital transformation, cloud adoption, and product development lifecycles.
• Experience governing the secure and responsible use of AI-enabled technologies, including risk management, controls, and ethical considerations.
• Extensive knowledge of cybersecurity frameworks (NIST, ISO 27001), risk management practices, and IT governance.
• Experience managing complex security operations, incident response, and threat mitigation.
• Strong background in security technologies including firewalls, SIEM, intrusion detection, encryption, and identity & access management.
• Experience implementing DevSecOps, secure software development, and security engineering practices.
• Experience with cloud security and securing multi-cloud infrastructures.
• Experience with leading Identity & access management (IAM).
• Deep understanding of Network and endpoint protection technologies.
• Working knowledge of data privacy regulations (e.g., GDPR, HIPAA) and compliance programs.
• Strong platform skills and proven track record in executive communication and influencing at the C-suite and Board levels.
• Strong analytical, decision-making, and problem-solving capabilities.

Preferred:

• Master's degree in Cybersecurity, IT, Business Administration, or related field.
• Certifications such as CISSP, CISM, CISA, or CRISC.
• Background in digital forensics, vulnerability management, and penetration testing.
• Experience deploying AI-driven threat detection, security orchestration (SOAR), automated incident response, and predictive risk analytics.
• Familiarity with emerging regulatory and industry expectations related to AI governance, algorithmic risk, and digital trust.

Core Focus

Trust & Security by Design

The CISO is the executive owner of the enterprise Trust and Security by Design framework, ensuring that cybersecurity, data protection, privacy, resilience, and ethical technology use are foundational design requirements—not after-the-fact controls. This includes embedding security and trust principles into:

• Digital products and guest-facing experiences
• Cloud, AI, and data platforms
• Workplace technologies and end-user computing
• Third-party and ecosystem integrations

Security decisions are risk-based, automated where possible, and aligned to customer trust, regulatory expectations, and long-term enterprise value.