BCD Travel
BCD Travel
BCD Travel palīdz organizācijām pārvaldīt darījumu ceļojumus, piedāvājot korporatīvo ceļojumu pārvaldības pakalpojumus, atbalstu risku pārvaldībā un integrētus rīkus ceļojumu programmām. Uzņēmums darbojas vairāk nekā 100 valstīs, nodrošinot pielāgotus risinājumus uzņēmumiem un to darbiniekiem darījumu ceļojumu, loģistikas, viesmīlības un konsultāciju jomā. Uzņēmums arī pievēršas ceļojumu programmu darbības uzlabošanai un ilgtspējīgāku pieeju veicināšanai darījumu ceļojumos.

Senior Information Security Risk Analyst

Assess security risks, controls, suppliers, and emerging technologies while supporting BCD Travel’s global governance program. Help teams manage risk across business travel technology and operations.

Apraksts

  • Assess information security risks across applications, infrastructure, cloud services, business processes, projects, integrations, and suppliers.
  • Rate inherent and residual risk using approved criteria, supporting evidence, and documented rationale.
  • Identify control gaps and assess the design, implementation, and effectiveness of security controls.
  • Document risk statements and recommend practical ways to address risk.
  • Align risks and findings with internal policies, control procedures, regulatory obligations, and security frameworks.
  • Work with business and risk owners to plan remediation and risk treatment.
  • Maintain and improve the centralized information security risk register.
  • Assess supplier security risks and review assurance documents, certifications, reports, testing evidence, contract requirements, and control gaps.
  • Evaluate risks from emerging technologies, including artificial intelligence, and advise on governance and controls.
  • Coordinate with Security, Privacy, Legal, Compliance, Audit, Technology, Procurement, Business Relationship Management, and business teams.
  • Produce risk summaries, dashboards, metrics, and management reports.
  • Track changes in technology, processes, suppliers, threats, vulnerabilities, regulations, and controls, and initiate reassessments as needed.

Prasības

  • Bachelor’s degree in information security, cybersecurity, computer science, information systems, risk management, business, or a related field, or equivalent experience.
  • Experience conducting information security or technology risk assessments using structured risk management methods.
  • Strong knowledge of security risk concepts, including threats, vulnerabilities, business impact, control effectiveness, and residual risk.
  • Ability to identify control gaps, assess controls, and recommend practical risk treatments.
  • Working knowledge of ISO/IEC 27001, ISO/IEC 27002, ISO 31000, NIST CSF, or comparable frameworks.
  • Experience assessing risk across applications, cloud services, infrastructure, suppliers, data protection, vulnerability management, and operational security.
  • Experience supporting supplier risk assessments and reviewing ISO certifications, SOC reports, PCI DSS documentation, penetration test results, and supplier security questionnaires.
  • Experience maintaining risk registers and producing accurate, traceable, audit-ready documentation.
  • Ability to lead risk discussions, influence stakeholders, and explain complex technical issues as clear business risks and actionable recommendations.
  • Familiarity with emerging technology risks, including artificial intelligence, privacy, and changing regulatory requirements.
  • Relevant certifications such as CRISC, CISSP, CISM, or ISO/IEC 27001 Lead Auditor or Implementer.
  • Governance-focused approach, strong analytical skills, sound professional judgment, and ability to work independently in a global environment.

Priekšrocības

  • Flexible hours and remote or work-from-home opportunities.
  • Opportunities to develop skills and advance your career.
  • Work with travel technology and contribute to the future of business travel.
  • Generous vacation allowance.
  • Compensation package with mental, physical, and financial wellbeing resources.
  • Travel industry professional perks and discounts.
  • Inclusive workplace that celebrates diversity.
  • Option to work from anywhere for 60 days per year.

Saistītās vakances

Thermo Fisher Scientific

Clarity PPM Applications Administrator – Thermo Fisher Scientific, Remote India

Thermo Fisher Scientific

Administer Clarity PPM and provide Level 2 support, monitoring, access management, testing, and deployments. Support enterprise application operations across India and the Philippines.

Atvērt
Avantor

Operations Coordinator – Laboratory Inventory and Shipping

Avantor

Coordinate laboratory inventory, purchasing, shipping, and customer service for Avantor’s scientific customers. The role also supports hazardous materials shipments, reporting, and inventory systems.

Atvērt
Intact

Property Claims Adjuster II – Intact, Mississauga

Intact

Investigate and settle residential, condominium, and commercial property claims for Intact customers across Canada. Deliver empathetic support through digital and phone channels.

Atvērt
Endless Studios

Game Design Curriculum Developer (Unity)

Endless Studios

Develop game design lessons for Florida high school career and technical education programs using Endless Studios’ Endstar engine. Create Unity bridge lessons, assessments, teacher guides, and classroom tutorials.

Atvērt
Nivoda

Senior AI/ML Engineer, Remote in the United States

Nivoda

Develop ranking, recommendation, and multimodal search systems for Nivoda’s global jewellery marketplace and jeweller storefronts. Build production machine learning capabilities across search, product discovery, and image matching.

Atvērt