13075 Manchester Rd, St. Louis, MO 63131Full timeR39758This position is on-site in St. Louis, Missouri.Candidates must be authorized to work in the United States and not require current or future employment visa sponsorship. Drury Hotels does not sponsor employment visas for this position.Property Location:13075 Manchester Rd - St. Louis, Missouri 63131You belong at Drury Hotels.Getting a job is just the beginning. Finding a place where you belong is what truly matters. Who you are and what you do makes a difference at Drury Hotels. There's a place for you here today and tomorrow.WHAT YOU CAN EXPECT FROM USSo. Much. More.Just as our guests deserve more, so do you deserve more. Be valued for what you do and who you are ... and well compensated for all you accomplish.Work-life-balance - Flexible scheduling, paid time off, hotel discounts and free room nightsCareer growth - Mentorship, cross-training, development plans, management training, and more-over 200 internal promotions this yearHealth and well-being - Medical, dental, vision, prescription, life, disability and Team Member Assistance ProgramRetirement - Company-matched 401(k)Award-winning - Ranked among Newsweek's America's Greatest Workplaces 2025Incentives - Quarterly bonuses (we succeed together!) based on hotel resultsSummary:Leads the company's cybersecurity program, overseeing governance, risk, compliance, and day-to-day security operations. Responsible for information security across internal systems, cloud solution providers, vendor/third-party solutions, identity and access management, and application development.Establishes security architecture, strategic roadmaps, and operational standards to strengthen the company's overall security posture. Evaluates and implements technologies and processes to improve efficiency, effectiveness, and strengthen overall security posture. Oversees capabilities that enable the organization to identify, protect, detect, respond to, and recover from cyber threats and vulnerabilities.Defines security requirements using risk assessments, threat modeling, testing, and analysis of existing systems. Ensures operational security activities (including endpoint security and patch management) are performed timely and efficiently. Oversees compliance related activities including PCI compliance and NIST alignment.Responsibilities and Duties:Provide leadership and direction for the cybersecurity program, managing a team that includes security operations and security compliance (GRC) leadership.Develop, maintain, and evolve a security roadmap and annual operating plan that balances operational needs, compliance requirements, and risk reduction.Stay current on industry threats, alerts, technology trends, and best practices related to cybersecurity.Oversee day-to-day security operations through the Supervisor of IT Security Operations, including monitoring/SOC, endpoint security (EDR), identity, vulnerability management, and timely remediation of alerts.Oversee governance, risk, and compliance through the Manager of Compliance and Security, including policy/standards management (e.g., NIST), risk assessments, audit support, and compliance obligations (e.g., PCI DSS). In a lean team environment, this role may also support operational security controls such as email security, Active Directory/Group Policy (GPOs), and network access controls (ACLs).Facilitates a metrics and reporting framework to measure the efficiency and effectiveness of the program, facilitates appropriate resource allocation, and increases the maturity of the cybersecurity, and reviews it with stakeholders at the executive and board levels.Directs the cybersecurity awareness training program for all team members and establishes metrics to measure the effectiveness of this security training program.Establish and enforce security standards and "security by design" practices across technology platforms, application development, and vendor solutions.Partner with IT operations to define, test, and oversee disaster recovery and business continuity security requirements and resilience controls.Oversee third-party security partners and vendor security posture, including due diligence, contractual security requirements, and ongoing third-party risk management.Hire, develop, coach, and evaluate team members; establish clear goals and metrics; and ensure appropriate training and professional development.Basic Qualifications:Strong analytical, problem-solving, and decision-making skills.Ability to learn and apply new technologies and security concepts quickly.Ability to communicate complex security topics to technical and non-technical stakeholders at an appropriate level of detail.Strong collaboration skills; ability to work effectively with coworkers, leaders, and external partners/vendors.Ability to work independently, prioritize competing demands, and lead through influence in a team environment.Ability to evaluate security tools and vendors, negotiate contracts, and manage vendor relationships.Demonstrated experience leading teams and influencing across IT and the business.Working knowledge of incident response concepts and operational security practices (e.g., endpoint security, vulnerability management, patching).Ability to apply a risk-based approach to prioritize security investments and activities.Effective verbal and written communication skills.Demonstrated experience and success in senior leadership roles in risk management, cybersecurity, and IT or OT securityExperience with contract and vendor negotiationsRequired Qualifications:10+ years of experience in cybersecurity, including leadership/management experience.Production/enterprise experience operating and improving security controls (e.g., EDR, vulnerability management, email security, network security).Experience with security frameworks and compliance requirements (e.g., NIST, PCI DSS) and translating them into actionable controls.Experience with identity and access management (IAM), privileged access, and related monitoring practices.Experience with third-party/vendor risk management and security assessments.Preferred Qualifications:Experience leading large teams, including managing managers.Strong knowledge of network and security fundamentals and how they apply to enterprise environments.Experience with security budgeting, KPI/metrics reporting, and multi-year roadmap development.Experience with Microsoft administrative controls and governance.Certified Information Systems Security Professional (CISSP), Certified Information Security Manager (CISM), Certified Information Systems Auditor (CISA), Certified in Risk and Information Systems Control (CRISC) or other similar credentialsRise. Shine. Work Happy. Apply NowAt Drury Hotels, we prioritize our team's personal growth and career development. As part of our team, you will be empowered to grow and encouraged to shine.At Drury Hotels, we offer our guests more than a place to sleep. We provide a place to feel welcome. Happy. At home. As a family-owned and operated hotel system, we honor and enhance the Drury legacy of world-class hospitality excellence. That's the Drury Way. Our 6,100+ team members work together-across 150 hotels in 30 states-to make sure every guest receives the very best service and value. Together we continue to grow, carefully and with clear vision, as a family of thriving hotels nationwide. EOEExplore Our Culture
Drury Hotels is an equal opportunity /affirmative action employer. If you require an accommodation in order to view or apply to open positions or for any other part of the application or employment process, please call 888-324-1897 or email recruiting@druryhotels.com.
