The position is a part of Marriott International Global Information Security team and will work closely with other technology and business units to secure data in a highly diverse and regulated corporate environment. Position will be responsible for the planning, design, deployment, and management of data security in Cloud IaaS, PaaS and SaaS environments, including AI-powered applications and enterprise copilots. Enable the organization to store, transmit and process sensitive data in these environments, while implementing and monitoring compliance with data governance policies, data security and data privacy procedures. This role will leverage the Zenity AI security platform to protect enterprise AI applications, agents, and copilots from data leakage, prompt injection, and other AI-specific threats.
Education and Experience
Required
- Bachelor's degree in Computer Sciences or related field or equivalent experience/certification.
- 7+ years of information technology experience, with 3+ years of experience in information security
- 2+ years' experience discovering, cataloging, and protecting sensitive data, including monitoring and preventing data exfiltration.
- 1+ years' hands-on experience working with several of these technologies: Data Loss Prevention (DLP), Data Discovery, Cloud Security Access Broker (CASB), Data Rights Management (DRM), SSL certificate and Encryption Keys.
- 1+ years' with AI security platforms and tools for securing enterprise AI applications, copilots, and low-code/no-code environments.
Preferred
- Current information security certification, including Certified Information Security Manager (CISM), or Certified Information Systems Security Professional (CISSP)
- Hands-on experience with any CASB and / or DLP product or service highly preferred.
- Experience with Public Cloud environments in data governance or data compliance standards.
- Familiarity with security frameworks and regulatory requirements CSA, NIST, PCI DSS, GDPR, CCPA, etc.
- Working knowledge of common IT technologies such as Windows server, Linux / Unix, Databases, Active Directory / LDAP, end-user devices.
- Familiarity with change management and deployment processes in large organizations.
- Demonstrated experiences identifying and assessing cloud security vulnerabilities and risks
- Proven ability to effectively prioritize and execute tasks, manage competing priorities.
- Excellent communication, analytical and planning skills to manage implementation of data security controls and practices.
- Current information security certification, including Certified Information Security Manager (CISM), or Certified Information Systems Security Professional (CISSP)
- Hands-on experience with any CASB and / or DLP product or service highly preferred.
- Experience with Zenity AI security platform or similar AI application security solutions for monitoring and protecting AI agents, copilots, and GenAI applications.
- Experience with Public Cloud environments in data governance or data compliance standards.
- Familiarity with security frameworks and regulatory requirements CSA, NIST, PCI DSS, GDPR, CCPA, etc.
- Understanding of AI-specific security risks including prompt injection, data leakage through AI systems, and shadow AI governance.
- Working knowledge of common IT technologies such as Windows server, Linux / Unix, Databases, Active Directory / LDAP, end-user devices.
- Familiarity with change management and deployment processes in large organizations.
- Demonstrated experiences identifying and assessing cloud security vulnerabilities and risks, including AI application vulnerabilities.
- Proven ability to effectively prioritize and execute tasks, manage competing priorities.
- Excellent communication, analytical and planning skills to manage implementation of data security controls and practices.
CORE WORK ACTIVITIES
- Running operations for cloud security systems to protect sensitive data on managed networks, including AI-powered applications and enterprise copilots.
- Conducting cloud security analysis of Cloud platforms/environments and AI application ecosystems.
- Performing onboarding of data security services via setup, log processing setup, policy configuration, and agent deployment.
- Deploying and managing the Zenity AI security platform to discover, monitor, and secure enterprise AI applications, copilots, and agents across the organization.
- Configuring Zenity policies to prevent sensitive data exposure through AI systems and enforce data governance in GenAI environments.
- Assisting with configuration and delivery of CASB reports and Zenity AI security dashboards.
- Providing remote technical support for CASB services, Zenity platform, and resolve service-related issues through research and troubleshooting.
- Monitoring AI application behavior using Zenity to detect anomalies, prompt injection attempts, and unauthorized data access.
- Troubleshooting tickets assigned and drive towards positive resolution.
- Troubleshooting system level problems in a multi-vendor, multi-protocol network environment.
- Ensuring technology issues are addressed as per the priority and escalated as necessary.
- Documenting all technical issues, analysis, communication, and resolution.
- Performing issue resolution for cloud security events and incidents, including AI security incidents identified through Zenity.
- Developing and managing Cloud-specific security policies, standards and procedures e.g., CASB tenant management, proxy server management, firewall management, SSL/IPSec, security incident and event management (SIEM), data protection (DLP, encryption), user account management (SSO, SAML), password/key management, and AI application security policies via Zenity.
- Executing on Cloud security engagements during different phases of the lifecycle design, implementation and operations, including AI security architecture reviews.
- Implementation of industry leading practices around cyber risks, Cloud, and AI application security.
- Collaborating with development teams to integrate Zenity security controls into AI application development and deployment pipelines.
- Performing continuous improvement processes for all SOPs and service documentation.
- Technical leadership in the areas of cloud data security and AI application security.
Maintaining Goals
- Submits reports in a timely manner, ensuring delivery deadlines are met.
- Promotes the documenting of project progress accurately.
- Provides input and assistance to other teams regarding projects.
Managing Work, Projects, and Policies
- Manages and implements work and projects as assigned.
- Generates and provides accurate and timely results in the form of reports, presentations, etc.
- Analyzes information and evaluates results to choose the best solution and solve problems.
- Provides timely, accurate, and detailed status reports as requested.
Demonstrating and Applying Discipline Knowledge
- Provides technical expertise and support to persons inside and outside of the department.
- Demonstrates knowledge of job-relevant issues, products, systems, and processes.
- Demonstrates knowledge of function-specific procedures.
- Keeps up-to-date technically and applies new knowledge to job.
- Uses computers and computer systems (including hardware and software) to enter data and/ or process information.
Delivering on the Needs of Key Stakeholders
- Understands and meets the needs of key stakeholders.
- Develops specific goals and plans to prioritize, organize, and accomplish work.
- Determines priorities, schedules, plans and necessary resources to ensure completion of any projects on schedule.
- Collaborates with internal partners and stakeholders to support business/initiative strategies
- Communicates concepts in a clear and persuasive manner that is easy to understand.
- Generates and provides accurate and timely results in the form of reports, presentations, etc.
- Demonstrates an understanding of business priorities
