Our Loews Hotels & Co Home Office teams provide support to all our properties throughout the United States and Canada. Our talented teams provide guidance over strategic planning, operations, revenue management, communications, marketing, finance, human resources, and information technology. This position is based at the Lakewood Regional Support Center on the campus of Loews Hotels at Universal Orlando in Orlando, FL. We offer hybrid schedule flexibility based out of our office in Orlando, FL. Who We Are: Loews Hotels & Co is a leading owner and operator of luxury hotels with a portfolio consisting of 25 hotels and resorts in the United States and Canada. Located in major city centers and resort destinations from coast to coast, the Loews portfolio features one-of-a-kind properties that go beyond Four Diamond standards and embrace their “uniquely local” community in order to curate exciting, approachable and local travel experiences for guests. What We Offer: This is a bonus eligible position Competitive health & wellness benefits, 401(k) & company match Paid Sick Days, Vacation, and Holidays, Paid Bereavement, Paid Pet Bereavement Training & Development opportunities, career growth Tuition Reimbursement Team Member Hotel Rates, other discounts, perks and more What We’re Looking For: We're seeking an Information Security Analyst to join our team! As an Information Security Analyst, you'll be a vital line of defense against ever-evolving cyber threats. You'll leverage your technical expertise and strategic thinking to protect our organization's digital assets. We're looking for someone who thrives in a collaborative environment, fostering a culture of learning and growth within our teams. Who You Are: A relationship builder with a dynamic approach to developing connections A continually curious forward thinker who loves to find creative solutions A team builder with the ability to establish a strong following Comfortable with taking the lead in a variety of settings A collaborator, learner and mentor who excels in an exciting, ever-evolving environment A sharp minded security professional who thrives on tackling complex problems and possesses a logical, methodological approach to identify, investigate, and resolve information security challenges A communicator & collaborator who bridges the gap between technical and non-technical audiences by effectively explaining complex security concepts. A master of prioritization and thrives in fast-paced environments. You excel at juggling multiple tasks, consistently meeting deadlines, and staying ahead of the curve with your proactive approach to security threats and challenges. What You’ll Do: Vulnerability Management: Track identified weaknesses in systems and networks through vulnerability assessments and penetration testing and report on remediation progress. Security Incident Response: Track and report on all remediation efforts that are identified during the response. Conduct security risk assessments: Identifying vulnerabilities and recommending mitigation strategies. Report on mitigation strategies until fully implemented. Security Controls Effectiveness reporting: Perform monthly metrics collection and reporting on key security controls Security Policy and Standards Review: Maintain up-to-date security policies and standards through regular reviews. Monitor and audit security controls: Verifying their effectiveness and adherence to policies. Your Experience Includes: Must be willing and able to travel 3% of the time Bachelor's degree in a relevant field: Information Security, Computer Science, Cybersecurity, or a related field is preferred. May accept equivalent experience in lieu of a degree. 8-10 years of experience in Information Security, with a strong track record of accomplishment. Strong understanding of information security principles and best practices: This includes knowledge of security frameworks like NIST, PCI, SOX, and common attack vectors. In-depth knowledge of PCI DSS requirements: Understanding all six control categories (Build & Maintain a Secure Network, Protect Cardholder Data, maintain a Vulnerability Management Program, Implement Strong Access Control Measures, Regularly Monitor and Test Networks, and Maintain an Information Security Policy) is crucial. Understanding of network security concepts: Firewalls, network segmentation, access control lists (ACLs), and secure protocols (HTTPS, SSH) are essential. Scripting skills (Python, Bash): May be required for automating security tasks. Certified Information Systems Security Professional (CISSP) or GIAC certifications Headquartered in New York City, Loews Hotels & Co is rooted in deep heritage in the hotel industry and excellence in service. As one of the only independently owned family hotel companies, we know that hospitality comes from the heart. Loews Hotels & Co owns and operates hotels and resorts across the U.S. and Canada. Located in major city centers and resort destinations, including multiple hotels in partnership with Universal Orlando Resort, Loews Hotels & Co features properties grounded in family heritage and dedicated to delivering unscripted guest moments, all with a locally handcrafted approach. We pride ourselves on the individuality and uniqueness of our offering. Joining Loews Hotels & Co means not just gaining a job, it means becoming a part of a family. A family where Team Member growth and empowerment are part of our DNA and have been for decades. We offer progressive benefits including paid parental leave, 401K matching and travel benefits, and opportunities for ongoing learning and development. But beyond that, as a member of the Loews Hotels family, you are part of a culture of diversity and inclusion, one that works hard to protect our environment with eco-friendly and sustainability programs, and one that is always a good neighbor to their communities, supporting them in ways large and small. We welcome you to join us. Loews Hotels & Co is an Equal Opportunity Employer that does not discriminate on the basis of actual or perceived race, color, creed, religion, national origin, ancestry, citizenship status, age, sex or gender (including pregnancy, childbirth and pregnancy-related conditions), gender identity or expression (including transgender status), sexual orientation, marital status, military service and veteran status, physical or mental disability, genetic information, or any other characteristic protected by applicable federal, state or local laws and ordinances.