Start your journey with BCD: Grow, connect, collaborate and celebrate with our global team

Risk Analyst II, Information Security(Remote)

Full time, (home)based in India, EU (Poland, Spain) & LTAM (Brazil, Costa Rica, Mexico, Colombia)

The Security Risk Assessment Analyst II will work within Information Security and collaboratively across the BCD Travel organization to support and enforce security controls in alignment with established security policies and standards.The successful candidate will be responsible for executing security risk assessments of internal systems as well assessing vendors and suppliers.

The ideal candidate will be experienced in conducting security risk assessments, possess a strong security controls background, and have a mix of technical and business acumen layered with polished communication. The candidate must also have a solid understanding of legal, regulatory and industry requirements and the ability to apply such knowledge within the risk assessment process.

As aRisk Analyst II, Information Security, you will

• Bring your expertise in risk assessment to assess and report on our information systems, processes, and procedures according to Information Security Policy requirements and best practices
• Perform security risk assessments using BCD Travel's chosen GRC platform; organize and track supporting evidence, identify, analyze, evaluate, and report risks in context with business operations, documenting security requirements and recommendations for reducing risk
• Perform tabletop or onsite assessments and technical review of key vendors to ensure adherence to contractual obligations and industry best practices
• Demonstrate mastery of security controls to assess against and be able to communicate legal, regulatory, and contractual requirements
• Evaluate information systems architectural designs, data-flow diagrams and technical security implementations for security controls deficiencies
• Leverage knowledge to facilitate remediation and security posture improvement of BCD Travel
• Foster a security-positive and risk-aware culture by using an educational approach to helping others understand risk and how to better protect BCD Travel information and systems
• Participate in overall business planning, bringing current knowledge and future vision of security
• Gather and analyze data for reporting purposes
• Maintain compliance to business requirements
• Promote and exhibit collaboration, transparency, and teamwork
• Interact with internal and external customers

About you

• BA/BS in Computer Science, Information Systems, or similar field (or BA/BS in Business with a minor in Computer Science, Information Systems, or similar field), or equivalent work experience
• 5 years of experience in the field or in a related area
• 3 year of relevant general Information Technology experience, desired
• Security industry relevant certifications such as CRISC, CISSP, CISM, CISA, HISP
• Experience with compliance programs such as GDPR, ISO 27001:2013, ISO 9001:2015, SOC 2, PCI, NIST 800-53 or other security frameworks
• Knowledge and understanding of security controls across all security domains
• Experience in leading security processes and initiatives
• Excellent analytical skills & critical thinking
• Ability to prioritize and appropriately manage time
• Self-starter with the ability to work with minimal supervision

#dice

#LI-VP1

Interested?

Ready to join the journey? Apply now!

We're dedicated to building a diverse, inclusive and authentic workplace. If you're excited about a role, but your experience doesn't align perfectly, we still encourage you to apply