BCD Travel
BCD Travel
BCD Travel pomaga organizacijam upravljati poslovna potovanja s storitvami upravljanja poslovnih potovanj, podporo pri obvladovanju tveganj in integriranimi orodji za potovalne programe. Njeno delovanje zajema več kot 100 držav, kar omogoča prilagojene rešitve za podjetja in njihove zaposlene na področjih poslovnih potovanj, logistike, gostinstva in svetovanja. Podjetje se osredotoča tudi na izboljšanje uspešnosti potovalnih programov ter razvoj bolj trajnostnih pristopov k poslovnim potovanjem.

Senior Information Security Risk Analyst

Assess security risks, controls, suppliers, and emerging technologies while supporting BCD Travel’s global governance program. Help teams manage risk across business travel technology and operations.

Opis

  • Assess information security risks across applications, infrastructure, cloud services, business processes, projects, integrations, and suppliers.
  • Rate inherent and residual risk using approved criteria, supporting evidence, and documented rationale.
  • Identify control gaps and assess the design, implementation, and effectiveness of security controls.
  • Document risk statements and recommend practical ways to address risk.
  • Align risks and findings with internal policies, control procedures, regulatory obligations, and security frameworks.
  • Work with business and risk owners to plan remediation and risk treatment.
  • Maintain and improve the centralized information security risk register.
  • Assess supplier security risks and review assurance documents, certifications, reports, testing evidence, contract requirements, and control gaps.
  • Evaluate risks from emerging technologies, including artificial intelligence, and advise on governance and controls.
  • Coordinate with Security, Privacy, Legal, Compliance, Audit, Technology, Procurement, Business Relationship Management, and business teams.
  • Produce risk summaries, dashboards, metrics, and management reports.
  • Track changes in technology, processes, suppliers, threats, vulnerabilities, regulations, and controls, and initiate reassessments as needed.

Zahteve

  • Bachelor’s degree in information security, cybersecurity, computer science, information systems, risk management, business, or a related field, or equivalent experience.
  • Experience conducting information security or technology risk assessments using structured risk management methods.
  • Strong knowledge of security risk concepts, including threats, vulnerabilities, business impact, control effectiveness, and residual risk.
  • Ability to identify control gaps, assess controls, and recommend practical risk treatments.
  • Working knowledge of ISO/IEC 27001, ISO/IEC 27002, ISO 31000, NIST CSF, or comparable frameworks.
  • Experience assessing risk across applications, cloud services, infrastructure, suppliers, data protection, vulnerability management, and operational security.
  • Experience supporting supplier risk assessments and reviewing ISO certifications, SOC reports, PCI DSS documentation, penetration test results, and supplier security questionnaires.
  • Experience maintaining risk registers and producing accurate, traceable, audit-ready documentation.
  • Ability to lead risk discussions, influence stakeholders, and explain complex technical issues as clear business risks and actionable recommendations.
  • Familiarity with emerging technology risks, including artificial intelligence, privacy, and changing regulatory requirements.
  • Relevant certifications such as CRISC, CISSP, CISM, or ISO/IEC 27001 Lead Auditor or Implementer.
  • Governance-focused approach, strong analytical skills, sound professional judgment, and ability to work independently in a global environment.

Ugodnosti

  • Flexible hours and remote or work-from-home opportunities.
  • Opportunities to develop skills and advance your career.
  • Work with travel technology and contribute to the future of business travel.
  • Generous vacation allowance.
  • Compensation package with mental, physical, and financial wellbeing resources.
  • Travel industry professional perks and discounts.
  • Inclusive workplace that celebrates diversity.
  • Option to work from anywhere for 60 days per year.

Sorodna delovna mesta

GFIC Geiger Food Ingredients Recruitment & Consult.Ing

Senior EMEA Product and Business Development Manager, Food Ingredients

GFIC Geiger Food Ingredients Recruitment & Consult.Ing

Lead product and business development for an international food ingredients distributor across EMEA. Build principal relationships, support sales managers in 40 countries, and grow B2B business in oils, fats, cocoa, and other food ingredients.

Odpri
Nestle

CRM Expert, LATAM

Nestle

Lead Salesforce Marketing Cloud campaigns across email, WhatsApp, and SMS for Nestlé’s food and beverage business in Latin America. Coordinate consumer journeys and tailor CRM programs to local markets.

Odpri
P

Associate Director of Key Accounts, Pharma

Pharma

Build executive partnerships and growth strategies across U.S. healthcare accounts for pharmaceutical products. Manage group purchasing organization programs, customer insights, and cross-functional business plans.

Odpri
DEKRA North America

General Manager, Process Safety Testing

DEKRA North America

Lead DEKRA’s Princeton process safety testing laboratory, with responsibility for its P&L, safety, quality, and daily operations. Guide business growth, technical delivery, and development of a 15–25-person team.

Odpri