Information Security Analyst

Join the Ritz-Carlton Yacht Collection:  Where Every Voyage is a Symphony of Luxury

Embark on an extraordinary journey with the Ritz-Carlton Yacht Collection, an exquisite extension of the renowned Ritz-Carlton brand, dedicated to redefining ultra-luxury hospitality at sea. As a "Lady or Gentleman" of our esteemed team, you'll be entrusted with the art of delivering the impeccable "Gold Standards" that have made the Ritz-Carlton an epitome of excellence across the globe.

The Essence of Excellence: The Gold Standards
The Gold Standards are the bedrock of the Ritz-Carlton experience, setting us apart in the industry and establishing a legacy of unparalleled service. These standards embody the values and culture that define our brand, and serve as the compass guiding our every endeavor.

The Employee Promise

At The Ritz-Carlton, our Ladies & Gentlemen are the most important resource in our service commitment to each other and our guests.

By applying the principles of trust, honesty, respect, integrity, and commitment, we empower and nurture talent to the benefit of each individual and the company.

The Ritz-Carlton fosters a culture where all are valued, quality of life is enhanced, individual aspirations are fulfilled, and The Ritz-Carlton Mystique is strengthened.

Join us on a journey where every day is a testament to the highest standard of luxury and service. Apply now and be part of an unparalleled legacy in hospitality.

Key Responsibilities

·       Support Information Security governance, risk, and compliance activities.

·       Assist with security risk assessments and maintain security risks, remediation plans, exceptions, owners, target dates, and closure evidence.

·       Track security findings from vulnerability assessments, penetration tests, audits, PCI assessments, security reviews, application testing, and other sources through remediation and closure.

·       Support PCI DSS compliance activities, including remediation tracking, evidence collection, control validation, role-based security training requirements, and coordination with internal teams and external assessors.

·       Support internal and external audits and security assessments by coordinating evidence requests and working with control owners.

·       Assist with maintaining and improving Information Security policies, standards, procedures, controls, and supporting documentation.

·       Support security control assessments and help identify gaps between current practices and security requirements.

·       Support third-party security risk management, including vendor assessments, security reviews, identified risks, remediation commitments, exceptions, and ongoing tracking.

·       Support security awareness and training activities, including role-based training, phishing and social-engineering awareness, simulation results, remedial training, completion tracking, and effectiveness metrics.

·       Support application and asset governance by helping validate application ownership, business criticality, data classification, infrastructure dependencies, third-party dependencies, and security requirements.

·       Support data protection governance, including data classification, sensitive-data requirements, security controls, and coordination with technical teams responsible for implementing data protection capabilities.

·       Coordinate with Legal and Privacy when security risks, incidents, applications, or third parties involve personal or regulated data.

·       Support vulnerability management governance by tracking remediation ownership, due dates, aging, exceptions, business risk, and closure evidence.

·       Assist with incident response documentation, timelines, lessons learned, corrective actions, and remediation tracking.

·       Develop and maintain security metrics, KPIs/KRIs, dashboards, and management reporting across areas such as vulnerabilities, incidents, compliance, awareness, third-party risk, and remediation.

·       Work with managed security partners and internal teams to track security issues and ensure appropriate follow-up and closure.

·       Help maintain security inventories, risk registers, compliance documentation, control evidence, and supporting records.

·       Support cyber resilience, business continuity, disaster recovery, and security-related recovery exercises from a risk and governance perspective.

·       Help evaluate security and compliance risks associated with new technologies, applications, vendors, cloud services, and emerging technologies.

·       Identify opportunities to simplify and improve security processes, reporting, documentation, and governance.

·       Participate in Information Security projects and initiatives as the security program continues to mature.

Qualifications

·       2+ years of experience in Information Security, Cybersecurity, GRC, IT Risk, IT Audit, Compliance, or a related field.

·       Experience with security governance, risk assessments, audits, compliance, or security control frameworks.

·       Familiarity with frameworks and standards such as NIST, CIS Controls, ISO 27001, and/or PCI DSS.

·       Experience tracking risks, findings, remediation activities, evidence, exceptions, and control requirements.

·       General understanding of cybersecurity concepts including vulnerability management, IAM, cloud security, data protection, incident response, endpoint security, and security monitoring.

·       Experience supporting PCI DSS compliance or other regulatory/security compliance programs is strongly preferred.

·       Experience with third-party security risk or vendor security assessments is a plus.

·       Experience working with internal or external auditors and coordinating evidence is a plus.

·       Strong analytical, organizational, and problem-solving skills.

·       Ability to manage multiple findings, owners, deadlines, and priorities simultaneously.

·       Security certifications such as Security+, CISA, CRISC, CISM, or similar are a plus.

The Ritz-Carlton Yacht Collection is an Equal opportunity, inclusive employer and will consider all applicants for employment with the Company on the basis of merit, competence and qualifications without regard to race, color, religion, sex, national origin, age, disability, veteran status, sexual orientation, or any other category protected by federal, state, or local law.