Director IT Security

The user wants me to reformat a job posting into clean, well-structured semantic HTML. I need to follow the rules: - Use

for section headings (e.g., About the role, Responsibilities, Requirements, Qualifications, Skills, Benefits, Pay, Schedule) - Use

• for any list of duties/requirements/benefits, and

  for prose. - Do NOT repeat the job title as a heading (the page already shows it) and do NOT put Job ID / requisition numbers as headings — fold minor metadata into a short

  or drop it. - Preserve ALL substantive information; do NOT invent or summarize away detail. - Remove cookie/navigation/legal/EEO/equal-opportunity/scam-warning boilerplate, duplicated lines, and application instructions. - IMPORTANT: include a section ONLY when the posting has real, specific content for it — never emit a heading followed by filler/placeholder text (e.g., "commensurate with experience", "not specified", "N/A", "varies", "TBD") and never create Pay/Schedule/Benefits sections unless the posting actually states them. - Prefer a few substantive sections over many thin ones. - Output ONLY the HTML fragment — no /, no markdown code fences. Now, analyze the input text. The input includes: - Company description: "Yearly Highgate Hotels Highgate is a leading real estate investment and hospitality management company..." This is about the company. Could be an "About the company" section, but the rules say use headings like "About the role". The company description is not a role description. However, it's part of the posting. I could include it as a section "About the company" or "Company overview". The rules mention "About the role" as an example heading. But the posting includes company info. I think it's appropriate to include a section for company overview. The rules don't forbid it. They say "use

  for section headings (e.g. About the role, Responsibilities, Requirements, Qualifications, Skills, Benefits, Pay, Schedule)". The "e.g." suggests those are examples, not exhaustive. So I can add "About the company" or "Company overview". However, the rule "Do NOT repeat the job title as a heading (the page already shows it)" - the job title is "Director of IT Security". That's not repeated. The company description is separate. - Location: "Highgate Corporate Offices Irving, TX". Could be part of a "Location" section or folded into a short

  . The rules say fold minor metadata into a short

  or drop it. Location is minor metadata? It's a detail about the job. Could include in a "Location" heading? But the rules say never create sections unless real specific content. Location is a single line. Might be better to include as a paragraph in an "Overview" section. - Overview: "The Director of IT Security will oversee all security responsibilities for both the hotel level and corporate operations..." This is the role overview. Could be "About the role" or "Overview". The rules mention "About the role" as example heading. I'll use "About the role". - Responsibilities: a list of bullet points. Should be a section "Responsibilities" with

  • . - Qualifications: a list of bullet points. Should be a section "Qualifications" with
    • . - Benefits: a detailed list with sub-sections for different states. Should be a section "Benefits" with
      • but the benefits have nested details. Could structure as a list with sub-lists. The rules say use
        • for any list of duties/requirements/benefits. So I can create a list for benefits, and within each benefit item, maybe include sub-lists for state-specific details. However, the benefits section is quite detailed. I'll preserve all substantive information. - Posting Date: "This job opening was posted on October 23rd 2026 and will remain open for at least 75 days." This is minor metadata. Could fold into a short

          at the end or drop. The rules say fold minor metadata into a short

          or drop it. I'll include as a paragraph maybe in a "Posting details" section? But the rules say never create sections unless real specific content. Posting date is a single line. I'll include as a paragraph at the end, maybe after benefits. Now, I need to output only HTML fragment, no markdown code fences. Let's structure:

          About the company

          Highgate is a leading real estate investment and hospitality management company with over $15 billion of assets under management and a global portfolio of more than 400 hotels spanning North America, Europe, the Caribbean, and Latin America. With a 30-year track record as an innovator in the hospitality industry, this forward-thinking company provides expert guidance through all stages of the property cycle, from planning and development through recapitalization or disposition. Highgate continues to demonstrate success in developing a diverse portfolio of bespoke lifestyle hotel brands, legacy brands, and independent hotels and resorts, featuring contemporary programming and digital acumen. The company utilizes industry-leading revenue management tools that efficiently identify and predict evolving market dynamics to drive outperformance and maximize asset value. With an executive team of seasoned hospitality leaders and corporate offices worldwide, Highgate is a trusted partner for top ownership groups and major hotel brands.

          About the role

          The Director of IT Security will oversee all security responsibilities for both the hotel level and corporate operations. The position will require both a technical understanding and a comprehension of modern security practices. Activities would include executive level security briefings, control of security training programs, management of our PCI control program and developing and implementing security best practices across all systems. This position is based in Irving, Texas.

          Responsibilities

          • Collaborate with the CISO and partner with executives and their direct leadership teams to build robust Security roadmaps and plans.
          • Collaborate and oversight of multiple Managed Security Services Partner's.
          • Champion security practices and major security & compliance initiatives.
          • Work closely with Enterprise Risk Management to create quarterly, annual, and long-term security and risk management goals.
          • Articulate strategies, define metrics, and provide necessary updates to executive leadership.
          • Lead audit responses to 3rd party owner auditors, regarding IT security controls.
          • Partner with business unit leadership for the development, planning, and execution of major security initiatives.
          • Develop and maintain an asset prioritization program according to an asset’s risk and business impact.
          • Constantly updates the cybersecurity and information security strategies to address new threats.
          • Maintain a multi-year cybersecurity and information security roadmap with key performance indicators focused on reducing risk.
          • Ensure the development and implementation of an ongoing employee and member security awareness program.
          • Produce and maintain security policies and identifies area where new polices are needed.
          • Directs development and execution of an enterprise-wide Incident Response Plan.
          • Oversees and prepares the security budget.
          • Stay abreast of latest security news and trends to guide the mitigation of threats.
          • Other duties as assigned.

          Qualifications

          • BS in Computer Science, Information Technology, Engineering, or related field.
          • 6+ years of security experience with 2+ years of senior leadership experience.
          • Demonstrated ability in a combination of risk management, information security, and engineering roles.
          • Must have experience and knowledge of working with PCI standards.
          • Ability to identify, attract, hire, develop, and retain the best security professionals needed to staff a world class organization and ensure they have the vision, plan, support, and culture in place to deliver impact.
          • Domain expert on the threat landscape and innovative security strategies and products.
          • “Hands-on” operating style and approach but a view towards the future and willingness to invest in people development and in developing an organization that will support a large company.
          • Proven experience as a business-focused, change-driven, credible leader in a fast-growing business.
          • Expertise in understanding sophisticated technology & applying it in a practical way to build solutions.
          • Knowledge of IT control frameworks with experience in implementation of the following examples (ISO, NIST, PCI, ITIL).

          Benefits

          We are pleased to offer to our full-time associates a comprehensive and competitive benefits package designed to support your health, well-being, and financial future.

          • Medical insurance, dental insurance, vision insurance, life insurance, short-term and long-term disability insurance
          • 401(k) Retirement Plan with employer matching contributions
          • Paid holidays
          • Paid vacation
          • Paid sick leave (provided in accordance with applicable law)
          • Employee assistance program (EAP)
          • Educational opportunities / Tuition reimbursement
          • Paid jury duty leave, personal leave, medical leave, and military leave in accordance with applicable law

          For Employees Based In Washington

          • 8 paid holidays per year
          • Up to 20 days of paid vacation per year, based on classification and length of service
          • Paid Sick & Safe Time accrues at 1 hour for every 30 hours worked, with up to 72 hours of unused time carried over from one anniversary year to the next.

          For Employees Based In Colorado

          • 8 paid holidays per year; employees working in the City of Denver receive 64 hours of designated holiday time per calendar year
          • Up to 20 days of paid vacation per year, based on classification and length of service
          • 6 days or 48 hours of Paid Sick Leave per year, accrued at 1 hour for every 30 hours worked.

          For Employees Based In California

          • 8 paid holidays per year
          • Up to 20 days of paid vacation per year, based on classification and length of service, capped at 1.5x annual accrual rate; non-supervisory employees working in the City of Los Angeles accrue up to 22 days of Compensated Time Off, based on length of service capped at 192 hours of combined PST and CTO.
          • Paid Sick Time accrues at 1 hour for every 30 hours worked, unused time is carried over from one anniversary year to the next up to a maximum of 80 hours; employees working in the City of Los Angeles are provided 40 hours of Paid Sick Time annually on their anniversary, unused time is not carried over from one anniversary year to the next.

          Please note that certain benefits described above for associates in Washington, Colorado, and California may vary for associates covered by a Collective Bargaining Agreement (“CBA”). For such associates, eligibility for and the terms and conditions of benefits are governed by the applicable CBA and any applicable plan documents, and may differ from the benefits described above. In the event of any conflict or inconsistency, the terms of the applicable CBA and governing plan documents will control, as applicable. The above-referenced benefits do not apply to part-time positions.

          This job opening was posted on October 23rd 2026 and will remain open for at least 75 days.

          But note: The rules say "use

          for section headings". Should I use

          for sub-sections? The