As a Senior Business Security Analyst (BSA) you will support the delivery of Information Security and Risk Management goals and objectives within the Business Unit. This position is being created to support the principle of 'Global Oversight with Regional/Functional Insight' meaning we believe that risk management and security implementation is best executed at the point closest to the actual risk and with the insights and understanding of the unique business context
In this role you will report directly to the Business Information Security Officer (BISO) who is responsible for ensuring the security of the unit's information assets and systems. As a Business Security Analyst, you will assist the BISO in enabling the business unit to meet their business objectives in a secure and compliant manner. You will help drive the business unit's cybersecurity, safety, and fraud strategy by working closely with the BISO, and teams across the business unit helping them to address residual risk and support security enhancements.
Want more jobs like this?
Get jobs in Amsterdam, Netherlands delivered to your inbox every week.
You will require a good understanding of the company's key assets and processes, its unique business requirements, and the information security program. You will combine these information sources to address residual risk and provide tailored solutions by supporting security enhancements within the area of responsibility. The role is a critical partner for the business unit teams and operating groups and will represent security, safety, and fraud in daily operations.
Key Job Responsibilities and Duties:
- Support Security Risk Management: Assist the BISO in understanding the Security, Safety, & Fraud (SS&F) relevant threat and risk landscape for the business unit(s) and help in advising senior leadership on SS&F risk governance.
- Strategic Support: Aid in the development and communication of long-term SS&F strategies within the business unit, ensuring alignment with business objectives.
- Governance, Risk, and Compliance: Help assess, measure, and maintain operational excellence in SS&F, supporting compliance requirements.
- Culture of Security: Promote a culture of security within the business unit and identify opportunities to champion this culture.
- Communication & Reporting: Assist in reporting on risk posture to leadership and relevant collaborators through regular, consistent, actionable reporting metrics.
- Incident Management Support: Provide support during operational incident response, liaising between the business unit and SS&F to ensure incidents are managed through resolution.
- Business Partnership: Collaborate with the business unit and SS&F managers and teams to communicate SS&F risks and support the business unit in developing clear definitions of gaps and existing controls.
- Adaptability & Continuous Improvement: Respond and adjust to changing SS&F risk management regulatory requirements and emerging threats.
- Cross-functional Collaboration: Work cross-functionally to enhance strong collaboration within the business unit and SS&F teams.
Role Qualifications and Requirements:
Ideal candidates will have some combination of the following:
- Bachelor's degree in Information Systems, Cybersecurity, or a related field and minimum 3-5 years of experience in cyber security, safety, and/or fraud topics. This includes a wide range of topics from security policy development, to metrics capture and analysis, and controls implementation.
- Basic understanding of security best practices including NIST Risk Management Framework, NIST 800-53 controls, ISO 27000, and PCI DSS.
- Familiarity with risk assessment processes and incident response practices.
- Excellent communication skills and ability to effectively engage and influence stakeholders.
- Ability to develop and maintain strong relationships.
- Organised team worker, with strong attention to detail and execution skills.
- Additional cybersecurity qualifications such as CISSP , CISM, or similar are an advantage
Who you are:
- Be humble. Be yourself.
- Self-motivated and willing to take on challenges while adapting to an ever-changing operational environment.
- Data-driven. Base your decisions on facts rather than opinions.
- A go-getter who isn't afraid to get their hands dirty and dives into a project to achieve success by problem solving.
- Open-minded team player with excellent communication skills.
- Agile and innovative with the tenacity to thrive in a constantly changing environment.
- Firm and friendly, knowledgeable, and motivational to others. Open to diversity in all shapes and sizes.
- A customer-centric professional who prioritises the customer in all aspects of our work, while maintaining a strong sense of commercial awareness
Benefits & Perks: Global Impact, Personal Relevance:
Booking.com's Total Rewards Philosophy is not only about compensation but also about benefits. Our Total Rewards strive to make it easier for you to experience all that life has to offer on your terms so that you can focus on what really matters. We offer competitive compensation as well as thoughtful, valuable, and even fun benefits which include:
- Headquarters located in one of the most dynamic and cosmopolitan cities in Europe: Amsterdam.
- Contribute to a high scale, sophisticated, world-class product and see the real time impact of your work on millions of travellers worldwide.
- Be part of a truly international fast paced environment and performance driven culture.
- Full relocation support for you and your family to move to Amsterdam. We have fine-tuned this process by successfully relocating over 300 Technology professionals to Amsterdam in the last year alone!
- Performance-based company that offers 29 vacation days, career advancement, and lucrative compensation, including bonuses and stock potential.
- Discount on Booking.com accommodations with the "Booking Deal" including other perks and benefits.
- Company-sponsored family and social activities to help our employees become integrated with each other and Dutch culture.
- Diverse and creative colleagues from every corner of the world.
- Health, life, and disability insurance
- Annual paid time off and generous paid leave scheme including: parent, grandparent, bereavement, and care leave.
- Hybrid working including flexible working arrangements, and up to 20 days per year working from abroad (home country).
- Industry leading product discounts for yourself, friends, and family, including automatic Genius Level 3 status and quarterly Booking.com wallet credit.
- Free access to online learning platforms, development and mentorship programs, and a complimentary Headspace membership
- On-site meals, coffee, and snacks, including healthy and vegan options, daily
#ThinkInclusion: Wellbeing & Inclusion at Booking.com:
Inclusion, Diversity, Belonging, Wellbeing and Volunteering (IDBWV) have been a core part of our company culture since day one. This ongoing journey starts with our very own employees, who represent over 140 nationalities and a wide range of ethnic and social backgrounds, genders and sexual orientations.
Take it from our Chief People Officer, Paulo Pisano: "At Booking.com, the diversity of our people doesn't just create a unique workplace, it also creates a better and more inclusive travel experience for everyone. Inclusion is at the heart of everything we do. It's a place where you can make your mark and have a real impact in travel and tech."
We will ensure that individuals with disabilities are provided reasonable adjustment to participate in the job application or interview process, to perform essential job functions, and to receive other benefits and privileges of employment.
Booking.com is proud to be an equal opportunity workplace and is an affirmative action employer. All qualified applicants will receive consideration for employment without regard to race, colour, religion, gender, gender identity or expression, sexual orientation, national origin, genetics, disability, age, or veteran status. We strive to move well beyond traditional equal opportunity and work to create an environment that allows everyone to thrive.
Pre-Employment Screening
If your application is successful, your personal data may be used for a pre-employment screening check by a third party as permitted by applicable law. Depending on the vacancy and applicable law, a pre-employment screening may include employment history, education and other information (such as media information) that may be necessary for determining your qualifications and suitability for the position.