Please note that this is a contract role providing services to Hilton through Talent Solutions. If you are selected for this role, you will be employed by Talent Solutions and will not be an employee of Hilton. Contract workers are not employees of Hilton or any of its subsidiaries, nor will they be eligible for Hilton benefits.
US based remote role with a preferred candidate in EST/CST***
In addition, travel to the McLean office may be required (approximately 3 times over the course of the year)
Job Summary
This is an exciting opportunity to join a dynamic and globally focused cybersecurity team within one of the world's most recognized hospitality brands. The ideal candidate will play a critical role in identifying, assessing, and managing cyber risks across the enterprise, ensuring that the organization's risk posture is accurately reflected and effectively communicated to stakeholders at all levels. This role requires a detail-oriented, process-driven professional who can seamlessly navigate a fast-paced environment, manage multiple priorities simultaneously, and collaborate cross-functionally with business and IT teams to drive meaningful risk reduction outcomes.
The successful candidate will bring a well-rounded understanding of cybersecurity principles and risk management frameworks, along with the ability to quickly acclimate to established processes and contribute to the team's operational continuity and effectiveness.
Responsibilities
Review and update cyber risk reports to ensure consistency in format, quality, and content
Assess the business impact of identified security issues and calculate issue-level and overall risk ratings
Ensure risk assessments accurately reflect the organization's current exposure and risk posture
Manage the end-to-end cyber issue management lifecycle, including risk-based tracking, follow-up, and validation activities
Coordinate with business and IT teams to obtain remediation updates and evaluate supporting evidence
Determine when issues have been sufficiently addressed for closure based on established governance standards
Evaluate security issues identified outside of standard cyber review processes through bespoke risk assessments
Perform qualitative and quantitative risk analyses by determining likelihood, impact, and overall risk scores
Develop executive-level risk summaries and mitigation recommendations in partnership with business and IT stakeholders
Review and validate third-party cyber due diligence assessments to ensure scoring accuracy and consistency with vendor responses
Initiate cyber due diligence attestations for critical Tier 1 vendors and collaborate with Supply Management, business owners, and IT teams to gather required service details
Maintain current and accurate vendor contact information within the third-party risk management program
Assist in developing ad hoc cyber risk reports and executive presentations to support leadership decision-making
Maintain the enterprise risk oversight platform by collaborating with control owners to assess control maturity and monitor risk posture
Ensure enterprise risk information remains accurate, current, and aligned with organizational governance standards
Skills
Strong understanding of cybersecurity principles, frameworks, and risk management methodologies
Ability to perform both qualitative and quantitative risk analyses, including likelihood and impact assessments
Demonstrated ability to manage multiple priorities and tasks simultaneously while maintaining accuracy and meeting deadlines
Excellent attention to detail with a process-oriented mindset
Strong written and verbal communication skills, including the ability to develop clear and concise executive-level presentations and reports
Ability to work effectively and collaboratively across functions with business, IT, and third-party stakeholders
Experience evaluating remediation evidence and making risk-based closure determinations
Familiarity with third-party cyber risk management practices and vendor due diligence processes
Ability to quickly acclimate to new environments, tools, and processes
Strong analytical and critical thinking skills with the ability to accurately document and communicate complex risk information
Experience
Prior experience in a cybersecurity risk management, information security, or related role is required
Hands-on experience conducting or supporting cyber risk assessments, including issue lifecycle management
Experience working with enterprise risk management platforms or governance, risk, and compliance tools
Demonstrated experience collaborating with cross-functional teams including IT, business units, and third-party vendors
Experience developing risk reports or presentations for senior leadership or executive audiences is preferred
Background in third-party or vendor cyber risk management is a plus
Qualifications
Bachelor's degree in Cybersecurity, Information Technology, Computer Science, or a related field, or equivalent work experience preferred
Relevant industry certifications such as Certified Information Systems Security Professional (CISSP), Certified in Risk and Information Systems Control (CRISC), Certified Information Security Manager (CISM), or CompTIA Security+ are preferred
This is a rare opportunity to contribute to the cybersecurity mission of a globally recognized leader in the hospitality industry, working alongside a talented and collaborative team that is shaping the future of secure, innovative guest experiences. With a global scope and high visibility across the enterprise, this role offers meaningful work that directly supports the protection of one of the most trusted brands in the world, making it an exceptional opportunity for a cybersecurity professional looking to make a lasting impact.
Pay Rate Range
72 - 80 USD hourly