Director IT Security

## Compensation Type
Yearly

Highgate Hotels

Highgate is a leading real estate investment and hospitality management company with over $15 billion of assets under management and a global portfolio of more than 400 hotels spanning North America, Europe, the Caribbean, and Latin America. With a 30-year track record as an innovator in the hospitality industry, this forward-thinking company provides expert guidance through all stages of the property cycle, from planning and development through recapitalization or disposition. Highgate continues to demonstrate success in developing a diverse portfolio of bespoke lifestyle hotel brands, legacy brands, and independent hotels and resorts, featuring contemporary programming and digital acumen. The company utilizes industry-leading revenue management tools that efficiently identify and predict evolving market dynamics to drive outperformance and maximize asset value. With an executive team of seasoned hospitality leaders and corporate offices worldwide, Highgate is a trusted partner for top ownership groups and major hotel brands. www.highgate.com

Location

Highgate Corporate Offices Irving, TX

Overview

The Director of IT Security will oversee all security responsibilities for both the hotel level and corporate operations. The position will require both a technical understanding and a comprehension of modern security practices. Activities would include executive level security briefings, control of security training programs, management of our PCI control program and developing and implementing security best practices across all systems.This position is based in Irving, Texas.

Responsibilities

- Collaborate with the CISO and partner with executives and their direct leadership teams to build robust Security roadmaps and plans.

- Collaborate and oversight of multiple Managed Security Services Partner's.

- Champion security practices and major security & compliance initiatives.

- Work closely with Enterprise Risk Management to create quarterly, annual, and long-term security and risk management goals.

- Articulate strategies, define metrics, and provide necessary updates to executive leadership.

- Lead audit responses to 3rd party owner auditors, regarding IT security controls.

- Partner with business unit leadership for the development, planning, and execution of major security initiatives.

- Develop and maintain an asset prioritization program according to an asset’s risk and business impact.

- Constantly updates the cybersecurity and information security strategies to address new threats.

- Maintain a multi-year cybersecurity and information security roadmap with key performance indicators focused on reducing risk.

- Ensure the development and implementation of an ongoing employee and member security awareness program.

- Produce and maintain security policies and identifies area where new polices are needed.

- Directs development and execution of an enterprise-wide Incident Response Plan.

- Oversees and prepares the security budget.

- Stay abreast of latest security news and trends to guide the mitigation of threats.

- Other duties as assigned.

Qualifications

- BS in Computer Science, Information Technology, Engineering, or related field.

- 6+ years of security experience with 2+ years of senior leadership experience.

- Demonstrated ability in a combination of risk management, information security, and engineering roles.

- Must have experience and knowledge of working with PCI standards.

- Ability to identify, attract, hire, develop, and retain the best security professionals needed to staff a world class organization and ensure they have the vision, plan, support, and culture in place to deliver impact.

- Domain expert on the threat landscape and innovative security strategies and products.

- “Hands-on” operating style and approach but a view towards the future and willingness to invest in people development and in developing an organization that will support a large company.

- Proven experience as a business-focused, change-driven, credible leader in a fast-growing business.

- Expertise in understanding sophisticated technology & applying it in a practical way to build solutions.

- Knowledge of IT control frameworks with experience in implementation of the following examples (ISO, NIST, PCI, ITIL).

Benefits

We are pleased to offer to our full-time associates a comprehensive and competitive benefits package designed to support your health, well-being, and financial future.

- Medical insurance, dental insurance, vision insurance, life insurance, short-term and long-term disability insurance401(k) Retirement Plan with employer matching contributions

- Paid holidays

- Paid vacation

- Paid sick leave (provided in accordance with applicable law)

- Employee assistance program (EAP)

- Educational opportunities / Tuition reimbursement

- Paid jury duty leave, personal leave, medical leave, and military leave in accordance with applicable law

For Employees Based in Washington:

- 8 paid holidays per year

- Up to 20 days of paid vacation per year, based on classification and length of service

- Paid Sick & Safe Time accrues at 1 hour for every 30 hours worked, with up to 72 hours of unused time carried over from one anniversary year to the next.

For Employees Based in Colorado:

- 8 paid holidays per year; employees working in the City of Denver receive 64 hours of designated holiday time per calendar year

- Up to 20 days of paid vacation per year, based on classification and length of service

- 6 days or 48 hours of Paid Sick Leave per year, accrued at 1 hour for every 30 hours worked.

For Employees Based in California:

- 8 paid holidays per year

- Up to 20 days of paid vacation per year, based on classification and length of service, capped at 1.5x annual accrual rate; non-supervisory employees working in the City of Los Angeles accrue up to 22 days of Compensated Time Off, based on length of service capped at 192 hours of combined PST and CTO.

- Paid Sick Time accrues at 1 hour for every 30 hours worked, unused time is carried over from one anniversary year to the next up to a maximum of 80 hours; employees working in the City of Los Angeles are provided 40 hours of Paid Sick Time annually on their anniversary, unused time is not carried over from one anniversary year to the next.

Please note that certain benefits described above for associates in Washington, Colorado, and California may vary for associates covered by a Collective Bargaining Agreement (“CBA”). For such associates, eligibility for and the terms and conditions of benefits are governed by the applicable CBA and any applicable plan documents, and may differ from the benefits described above. In the event of any conflict or inconsistency, the terms of the applicable CBA and governing plan documents will control, as applicable.

**The above-referenced benefits do not apply to part-time positions

Posting Date

This job opening was posted on October 23rd 2026 and will remain open for at least 75 days.