Senior Advisor, Security Controls & Compliance
Location: United States, Georgia, Atlanta
Address: 1 - Corp Atlanta Ravinia, Three Ravinia Drive, Suite 100, 30346
Job number: 167357
Hiring Salary: USD 106,020.00 - 125,000.00 YEARLY
As the Senior Analyst IT Information Security responsible for leading senior-level security controls and compliance activities across regulatory and audit programs, including SOX, PCI, SWIFT, SOC 1/SOC 2, privacy-related assessments, and control management. This role provides control advisory support, coordinates auditor and stakeholder engagement, manages RFIs and findings, maintains compliance scope and control documentation, and drives timely remediation of control gaps.
The role partners closely with Security Risk, Governance, Technology, Privacy, Financial Governance, BISOs, external auditors, and delivery partners to strengthen control accountability, improve audit readiness, and provide clear reporting on status, risks, issues, and decisions needed by leadership.
Your Day To Day
- Lead assigned regulatory compliance programs and control portfolios across SOX, PCI, SWIFT, SOC 1/SOC 2, privacy, and other security control areas, ensuring scope, inventories, evidence expectations, and audit timelines are clearly defined and actively managed.
- Serve as senior control advisor and escalation point for assigned stakeholders, compliance partners, and delivery resources, providing guidance on control design, operating effectiveness, audit response quality, and remediation approach.
- Manage auditor coordination, RFIs, walkthroughs, findings, and remediation tracking by holding auditors and control owners accountable to milestones, improving quality of responses, and ensuring issues are escalated early with clear risk and impact framing.
- Maintain and improve compliance scope, control documentation, and control library data in partnership with GRC, ServiceNow, Axonius, Technology, and Security teams, ensuring control attributes, scope tags, ownership, and evidence requirements remain current and audit-ready.
- Build strong relationships with VP-level control owners, BISOs, Privacy, Financial Governance, Security Architecture, GIO, GPP, Product & Technology, and external audit partners to identify risks, resolve control gaps, and promote accountability for compliance outcomes.
- Support regulatory transformation and recurring gap remediation by identifying root causes, developing practical remediation plans, coordinating cross-functional follow-up, and helping implement sustainable control improvements.
- Provide concise status reporting and executive-ready updates on audit progress, RFIs, findings, indicators, risks, issues, decisions needed, and upcoming milestones for Director, SVP, CISO, and stakeholder reporting.
- Contribute to control automation and continuous monitoring initiatives by identifying candidate controls, validating business requirements, and ensuring automated indicators and dashboards support regulatory and operational compliance needs without owning the continuous controls monitoring capability.
What We Need From You
- Bachelor's or Master's Degree in Computer Information Systems, Information Technology, Cybersecurity, Business, Audit, Risk Management, or equivalent years of relevant work experience.
- 5+ years of progressive experience in information security, IT audit, technology risk, compliance, controls management, or related technology governance roles.
- Experience coordinating internal or external audits and regulatory compliance activities across frameworks such as SOX, PCI, SWIFT, SOC 1, SOC 2, privacy, NIST, ISO, COBIT, or related control frameworks.
- Demonstrated experience working with auditors, control owners, technology leaders, and cross-functional teams to manage RFIs, walkthroughs, findings, remediation, and executive reporting.
- Strong working knowledge of IT general controls, application controls, infrastructure controls, identity and access controls, change management, vulnerability management, incident management, and compliance evidence expectations.
- Ability to interpret audit requirements, challenge auditor requests where appropriate, and translate complex control topics into clear business impacts and remediation actions.
- Experience maintaining compliance scope, control inventories, control ownership, and evidence repositories in GRC or related platforms such as ServiceNow.
- Strong written and verbal communication skills, including the ability to prepare concise updates for Director, SVP, CISO, VP, auditor, and stakeholder audiences.
- Strong attention to detail, judgment, accountability, stakeholder management, and ability to operate independently in a complex, global environment.
- Working knowledge of control automation, indicators, dashboards, and analytics sufficient to support continuous monitoring initiatives and ensure outputs align to regulatory and audit needs.
Travel - 10%
Location - Our hybrid work structure is an expectation of three (3) days a week in office. This expectation may be adjusted to evolve with the changing needs of the business.
Who we are
At IHG Hotels & Resorts, we work together to deliver True Hospitality for Good on a global scale. With corporate offices and over 6,000 hotel destinations worldwide, a career at IHG is the perfect way to broaden your horizons. You’ll experience our unique culture and brilliant colleagues who will support and inspire you. With a host of corporate opportunities to choose from, wherever you are on your career journey, and whatever you want to achieve there’s Room for You at IHG.
Over recent years, we’ve transformed our company. We have bold ambitions to drive performance and maintain our relentless focus on growth in order to be the hotel company of choice that guests & owners love.
We are a hospitality business at our core and value connections and being together helps us foster a unique sense of belonging that also supports productivity. That’s why here at IHG, we give our colleagues flexibility and balance – working in a hybrid way, blending office and remote working collectively. We recognise that every role is different, that’s why leaders work with teams to determine how and when they collaborate.
We provide a wide range of benefits designed to help you live your best work life. These include impressive room discounts across our many properties, recharge days and volunteering days throughout the year. Through our myWellbeing framework, we are committed to supporting wellbeing in your health, lifestyle, and workplace. We offer a unique and inclusive culture, where there is always Room for You to belong, grow and make a difference.
Our mission is to welcome everyone and create inclusive teams where we celebrate difference and encourage colleagues to bring their whole selves to work. IHG Hotels & Resorts provides equal employment opportunities to applicants and employees without regards to race, color, religion, sex, sexual orientation, gender identity, national origin, protected veteran status, disability, or any other category protected by applicable laws. We promote a culture of trust, support, and acceptance. Always welcoming different backgrounds, experiences, and perspectives.
Vous ne répondez pas tout à fait à toutes les exigences, mais croyez quand même que vous seriez le candidat idéal pour le poste ? Nous ne le saurons jamais à moins que vous n'ayez appuyé sur le bouton « Appliquer ». Commencez votre voyage avec nous dès aujourd'hui.
Informations importantes:
- La fourchette salariale indiquée est la plus basse à la plus élevée que nous croyons, de bonne foi, que nous paierions pour ce poste au moment de cette publication. Nous pourrions finalement payer plus ou moins que la fourchette affichée, et la fourchette pourrait être modifiée à l’avenir. Le niveau de rémunération d'un employé au sein de la grille salariale sera déterminé en fonction de plusieurs facteurs, notamment la formation pertinente, les qualifications, les certifications, l'expérience, les compétences, l'ancienneté, les destinations géographiques, le rendement, les horaires de travail, les exigences de voyage, les indicateurs de vente ou de revenus, et les besoins de l'entreprise ou de l'organisation.
- Aucun montant de rémunération n'est considéré comme un salaire ou une compensation tant qu'il n'est pas gagné, acquis et déterminable. Le montant et la disponibilité de toute prime, commission ou autre forme de compensation attribuable à un employé particulier demeurent à la seule discrétion de la Société, sauf et jusqu’à ce qu’il soit payé, et peuvent être modifiés à la discrétion exclusive de la Société, conformément à la loi.
- EEO Is The Law - click here for more information about Equal Opportunity Employer Minorities/Women/Protected Veterans/Disabled/Sexual Orientation/Gender Identity.
- Si vous avez besoin d’un aménagement raisonnable pendant le processus de demande, veuillez cliquer ici.
- IHG n’accepte pas les candidatures, demandes de renseignements ni CV/CV non sollicités provenant d’agences de recrutement ou de placement. Veuillez cliquer ici pour connaître notre politique d’agence.
- Si vous résidez ou postulez à un poste dans l’État de Washington, veuillez cliquer ici pour lire les avantages applicables.
- For roles or applicants in San Francisco only: Pursuant to the San Francisco Fair Chance Ordinance, we will consider for employment qualified applicants with arrest and conviction records.
Hiring Salary: USD 106,020.00 - 125,000.00 YEARLY
