Accommodations Plus International

Compliance

• Lead organization-wide risk analysis, maintaining a risk register with documented remediation and mitigation plans.
• Serve as the primary advisor on information security risks to security management and business unit leads.
• Establish and own the strategy for managing security audits, compliance checks, and external assessments — including GDPR, SOC 2, ISO 27001, CCPA, and other applicable standards.
• Liaise with internal and external auditors to implement and sustain required controls.
• Build and manage a comprehensive vendor risk program, evaluating the cybersecurity and data protection controls of third parties, vendors, and business partners.
• Drive ongoing security program improvement by amplifying areas of strength and developing actionable plans to address gaps.
• Lead data governance and data protection programs, ensuring alignment with enterprise risk management principles and up-to-date documentation of systems and processes.
• Facilitate IT compliance across identified controls, including IT general controls (ITGCs), application, cloud, and cybersecurity controls.
• Document, communicate, and enforce security policies that balance risk with business operations.
• Champion cybersecurity best practices across all business units to reduce the organization’s attack surface.
• Oversee GRC-related incident response activities, tracking occurrences and resolutions with strict documentation and reporting protocols.
• Manage the access review process to ensure appropriate access is consistently granted, maintained, and revoked.

Director, Governance, Risk & Compliance

Security Engineer

• Lead API’s global cyber defense program
• Own API’s cyber defense strategy across threat intelligence, detection, incident response, and product fraud and abuse
• Lead and manage the SOC MSSP, ensuring 24x7x365 monitoring, investigation, and response
• Manage API’s cloud security posture across AWS and Azure
• Partner with engineering to embed security into product development
• Lead containment, recovery, and postmortem activities for security incidents
• Apply NIST, MITRE ATT&CK, and the Cyber Kill Chain to guide security architecture
• Develop and maintain scorecards that measure SOC effectiveness and organizational risk
• Identify and implement automation technologies to improve threat detection

Director, Cybersecurity

Artificial Intelligence

• Own the operational backbone of API’s AI Enablement program
• Run intake, hypothesis design, metric definition, and outcome documentation for AI experiments across Engineering, Client Delivery, and Corporate functions
• Run end-to-end management of AI pilots across the portfolio
• Drive org-wide training, communications, and enablement for Claude Enterprise and Microsoft Copilot
• Produce the monthly AI scorecard: experiments launched, seats utilized, automation rates, FTE-equivalent savings, and experiments graduated
• Manage onboarding from initial cohort through expansion, including use-case intake, prioritization, and graduation criteria
• Manage, analyze, and optimize internal utilization of AI across the organization
• Own day-to-day relationship management for AI tooling vendors and the sandbox platform
• Drive alignment and execution on strategic initiatives across the organization.

Director, Governance, Risk & Compliance

Director, Cybersecurity

AI Strategy Analyst