Senior Analyst, Information Security

About BCD Travel

Start your journey with BCD Travel: Grow, connect, collaborate, and celebrate with our global team. We're a market leader in travel management, helping people and companies travel smart and achieve more. Our clients include some of the world's best-known and most innovative business and consumer brands. Operating in over 100 countries, the majority of our 10,000+ people work virtually, fostering a good work-life balance. We're committed to sustainability and driving success for our customers, our business, and ourselves.

Working at BCD Travel means connecting, collaborating, and celebrating. You'll be part of a virtual, dynamic, and flexible work environment that fosters a good work-life balance so you can focus on what makes you happy. We're dedicated to building a diverse, inclusive, and authentic workplace.

Job Summary

The Senior Analyst, Information Security will work collaboratively across the BCD Travel organization to establish and lead security control design and implementation for the BCD Travel enterprise. This position will align security requirements with business needs and clearly translate and communicate those needs into actionable requirements. The Senior Analyst, Information Security will also identify and report on the effectiveness of security controls and facilitate remediation and security posture improvement efforts. You will work within the Information Security team to ensure program objectives, policies, procedures, and standards align to meet BCD Travel's business objectives.

The ideal candidate must understand, interpret, and guide Legal, Regulatory, and contractual requirements across multiple industries and regions, focusing on Data Privacy and Information Security in the maintenance of our information security governance framework(s). You will possess good oral and written communication skills and have the ability to leverage skills and expertise within information security to develop and convey appropriate messages internally and externally.

Key Responsibilities of a Senior Analyst, Information Security

• Analyze, report, and integrate security into daily business operations.
• Review and redline client and supplier agreements.
• Evaluate and implement methods to continually improve security and assist business with reducing risks.
• Validate the implementation of security policies, practices, and systems' ability to maintain compliance to business requirements.
• Identify and communicate threats and vulnerabilities that could impact business operations.
• Assist with communication, implementation, and analysis of compliance to security policies, standards, and procedures.
• Collect, calculate, and format data for metrics reporting.
• Create, review, and maintain content for information security documentation (policies, procedures, standards, and guidelines).
• Interact with internal and external customers to ensure continuous customer satisfaction.

About You

• Bachelor’s Degree (B.A.) or equivalent combination of education and experience in Information Security, Computer Science, Management Information Systems, International business, or a related curriculum.
• Prior experience leading security processes and initiatives.
• Previous relevant general Information Technology experience.
• Security industry relevant certifications such as CISA, CISM, CISSP, HISP, PMP.
• Ability to prioritize and load balance sensitive projects concurrently.
• Experience with ISO 27000 Series, NIST, and Artificial Intelligence is a plus.

What BCD Travel Offers

• Flexible working hours and work-from-home or remote opportunities.
• Opportunities to grow your skillset and career.
• Generous vacation days so you can rest and recharge.
• A compensation package that feels fair to you, including mental, physical, and financial wellbeing tools.
• Travel industry professional perks and discounts.
• An inclusive work environment where diversity is celebrated.

Key skills/competency

• Information Security
• Security Controls
• Risk Management
• Compliance
• Data Privacy
• ISO 27000
• NIST Framework
• Threat Analysis
• Vulnerability Management
• Client Agreements