Are you a master of craft? Do you thrive in a team that succeeds together, demonstrating integrity and respect while acting responsibly? Do you embrace a growth mindset? We invite you to become a fan of the exceptional.
Mandarin Oriental is the award-winning owner and operator of some of the most luxurious hotels, resorts and residences located in prime destinations around the world, with a strong development pipeline. Increasingly recognized for creating some of the world’s most sought-after properties, the Group provides legendary service inspired by Asian heritage whilst representing the very cutting-edge of luxury experiences.
The Mandarin Oriental Corporate Office is currently seeking to appoint a Chief Information Security Officer (CISO), a senior executive role based in either Hong Kong or London. The CISO will be responsible for defining and leading the enterprise-wide vision, strategy, and program to ensure that all information assets and technologies are effectively protected.
This global leadership role will oversee cybersecurity, IT risk management, and compliance across both corporate functions and all properties within the luxury hospitality group. The CISO will manage a distributed global team and collaborate closely with senior business leaders to embed security into daily operations and long-term strategic initiatives.
The role will be responsible for:
Strategic Leadership
· Develop and execute a global information security strategy aligned with business objectives and regulatory requirements.
· Serve as the primary advisor to the CIO and executive leadership on cybersecurity risks, emerging threats, and mitigation strategies.
· Provide regular reports to the Board or Audit Committee on cybersecurity posture, major incidents, and compliance status.
· Champion a culture of security awareness across the organization.
· Partner with business units to embed security into digital transformation initiatives and support secure adoption of emerging technologies such as cloud, IoT, and Artificial Intelligence (AI).
· Maintain awareness of security risks, trends, and capabilities across the hospitality industry, and incorporate these topics, where appropriate, into the overall Information Security strategy.
Governance & Risk Management
· Establish and maintain an enterprise-wide information security governance framework.
· Oversee IT risk management processes, including risk assessments, vulnerability management, and incident response.
· Ensure compliance with international standards (e.g., ISO 27001), data privacy regulations (GDPR, CCPA, PDPA, China’s PIPL,etc.), and industry best practices including cross border requirements.
Cybersecurity Operations
· Direct global cybersecurity operations, including threat detection, monitoring, and response.
· Implement and maintain security technologies such as firewalls, intrusion detection systems, endpoint protection, and identity management.
· Lead incident response and crisis management for security breaches. Lead enterprise-wide cyber crisis simulations and ensure business continuity planning includes cybersecurity scenarios.
This job listing was provided by Hospitality Job Vacancies. To apply, please use the link in the job description.
Company Description Raffles & Fairmont the Red Sea, positioned in the kingdom’s groundbreaking Red Sea Project, will provide visitors access to two nature-focused resorts. With 361 rooms, 11 distinct dining concepts, including overwater restaurant with views of the Red Sea and the mangroves, and a Spa. Job Description Reporting to the Cluster […]
The Taskforce Assistant Director of Food & Beverage is responsible for providing operational leadership, support, and expertise across multiple properties on a temporary assignment basis. This role ensures seamless execution of F&B standards, drives revenue growth, maintains cost efficiency, and upholds exceptional guest experiences during periods of transition such as openings, rebrands, leadership vacancies, or […]
