Manager, Information and Cyber Security - Incident Response

About the job

IHG is seeking a Manager IT Information Security that will be responsible for supporting IHG’s Cyber Security Incident Response Team (CSIRT), including leading and coordinating the response to cyber security incidents and driving continuous improvement of incident response processes and capabilities to reduce business impact and strengthen organizational resilience.

In this role, you will work across business and technology teams to identify and address security and risk gaps in IT systems and business processes globally, including the development of appropriate controls. The Manager IT Information Security will communicate security risks, incident impacts, and recommended actions to Senior Management.

Your Day to Day

• Manage cyber security incident response, security investigations, and Information Security risk processes, including the coordination of complex incidents, and communicate risks, business impacts, and recommended actions to Senior Management.
• Recommend and implement changes in security technology and practices in accordance with industry standards and best practices, including opportunities to leverage automation and technology to improve incident response and related security capabilities. Manage global technology strategies to address security objectives.
• Provide technical advisory services to business and technology teams concerning security controls and security incidents. Identify opportunities to improve incident response and related security capabilities through process, technology, and automation.
• Create and review standards, guidelines, incident response playbooks, workflows, and procedures to meet IHG Information Security Policies as well as regulatory requirements. Evaluate vendors for new and existing solutions to assist in providing security assurance functions. Manage external teams conducting security assessments and network penetration testing. Conduct business analysis to assist business units in integrating security into their work. Assess and communicate any and all security risks associated with any and all purchases or practices performed by the company.
• Recommend and implement changes in security policies and practices in accordance with risks identified and regulatory requirements. Independently provide solutions to security problems in a cost-effective manner, including the application of automation, workflow, and emerging technologies to improve operational effectiveness.
• Assist in developing and executing security awareness training. Audit the proper administration of all computer security systems and their corresponding or associated software. Promote and oversee strategic security relationships between internal resources and external entities, including government, vendors, and partner organizations.
• Review regional standards, procedures, and controls on an annual basis to ensure they align with policy published by the Global Technology Enterprise Architecture (EA) team. Develop, manage, and maintain processes to ensure centrally managed services and solutions are compliant, including the tracking of all supporting reporting activities.

What We Need From You

• Bachelor's or Master's Degree in a relevant field of work or an equivalent combination of education and work-related experience. *Highly Desired Certification: CISSP *Preferred Certifications: CISA, CRISC, SANS, ISA, ISC2
• Typically, a minimum of 10 years of progressive work-related experience with demonstrated proficiency in multiple disciplines, technologies, or processes related to the position, preferably including cyber security incident response, security operations, or security investigations.
• Advanced knowledge of privacy and regulatory compliance including information security enterprise risk assessments, PCI remediation, data protection and strategy
• Advanced knowledge of preventative security controls, particularly in relation to protecting applications and data (i.e., firewalls, IDS/IPS, WAFs, anti-malware systems, cross-site scripting libraries, etc.)
• Advanced knowledge of security processes such as cyber security incident response, security investigations, vulnerability management, and risk assessment, knowledge of SOX, SOC, PCI, and regulatory security audit programs and audit procedurek, knowledge of operating system security controls (e.g., Windows, Linux, Unix), and advanced knowledge of IP networking and network protocols, architecture, and concepts, including their application to security investigations and incident response
• Understanding of business and information technology and security management processes. Strongly prefer experience with security automation, scripting, workflow development, or orchestration technologies, with demonstrated ability to apply technology to improve incident response and other security operations.
• Advanced knowledge of design and development processes and business requirements analysis. Demonstrated project management experience in organizing, planning, and executing large-scale projects and security capability improvements from conception through implementation

Travel: 10%

Location - Atlanta, GA: Our hybrid work structure is an expectation of three (3) days a week in office. This expectation may be adjusted to evolve with the changing needs of the business.

About Us

At IHG, we’ve made a promise. As one of the world’s leading hotel groups, we’re here to deliver True Hospitality for Good. Making our guests and colleagues feel welcome, cared for, recognised and respected – wherever they are in the world. Want to be part of the journey?Who we are

At IHG Hotels & Resorts, we work together to deliver True Hospitality for Good on a global scale. With corporate offices and over 7,000 hotel destinations worldwide, a career at IHG is the perfect way to broaden your horizons. You’ll experience our unique culture and brilliant colleagues who will support and inspire you. With a host of corporate opportunities to choose from, wherever you are on your career journey, and whatever you want to achieve there’s Room for You at IHG.

Over recent years, we’ve transformed our company. We have bold ambitions to drive performance and maintain our relentless focus on growth in order to be the hotel company of choice that guests & owners love.

We are a hospitality business at our core and value connections and being together helps us foster a unique sense of belonging that also supports productivity. That’s why here at IHG, we give our colleagues flexibility and balance – working in a hybrid way, blending office and remote working collectively. We recognise that every role is different, that’s why leaders work with teams to determine how and when they collaborate.

We provide a wide range of benefits designed to help you live your best work life. These include impressive room discounts across our many properties, recharge days and volunteering days throughout the year. Through our myWellbeing framework, we are committed to supporting wellbeing in your health, lifestyle, and workplace. We offer a unique and inclusive culture, where there is always Room for You to belong, grow and make a difference.

Our mission is to welcome everyone and create inclusive teams where we celebrate difference and encourage colleagues to bring their whole selves to work. IHG Hotels & Resorts provides equal employment opportunities to applicants and employees without regards to race, color, religion, sex, sexual orientation, gender identity, national origin, protected veteran status, disability, or any other category protected by applicable laws.  We promote a culture of trust, support, and acceptance. Always welcoming different backgrounds, experiences, and perspectives.

Additional Information

• Job Identification: 170947
• Job Category: Information and Cyber Security
• Posting Date: 2026-11-10
• Apply Before: 2026-11-17
• Job Schedule: Full time
• Locations: Three Ravinia Drive, Atlanta, GA, 30346, US (Hybrid)
• Hiring Salary: USD 119,000.00 - 145,000.00