Analyst II – Information Security

This is a fully remote position, open to applicants in India.

📋 Description

• Work collaboratively with internal teams on client-related issues and deliver comprehensive feedback from clients to BCD Information Security and the business.

• Serve as the primary point of contact for complaints and escalate issues as necessary.

• Manage and advocate for the Security Request for Proposal (RFP) database repository.

• Oversee the creation of RFP responses and assess them for precision.

• Develop and manage responses to customer inquiries stemming from RFPs and assessments.

• Maintain updated information security databases/repositories utilizing tools like Ombud, Archer, OneTouch, or others, while gathering and preserving essential audit evidence.

• Spearhead internal and external security communication initiatives within BCD Travel, provide formal replies to customer security inquiries, participate in and complete client security assessments, and manage information security audits, risk remediation, and mitigation strategies.

• Possess knowledge of Artificial Intelligence (AI) and demonstrate the ability to analyze data using analytical tools and methodologies.

• Collaborate with stakeholders to ensure AI initiatives align with organizational values and standards.

• Ensure that AI controls are properly aligned, validating output results to maintain the accuracy and integrity of information.

• Identify and report on risks and concerns related to AI usage in support of clients and business assessments.

• Partner with development, business, sales, and legal teams to advise on the design and upkeep of effective information security controls that comply with ISO 27001, NIST 800-53, PCI, SOC, and GDPR.

• Assist in bridging the centralized security function with the business to support the Information Security objectives and challenges of our organization, and aid in the formulation of relevant standard operating procedures.

⛳️ Requirements

• Bachelor's Degree (B.A., B.S.) or an equivalent combination of education and experience in Information Protection, Computer Science, Management Information Systems, or a related field.

• Professional experience is essential, ideally involving information security, sales, legal, account and supplier management, travel industry, and RFP support.

• Relevant general Information Technology experience is necessary.

• Familiarity with ISO Compliance Series, NIST, Artificial Intelligence (AI), PCI, and ITIL.

• Ability to utilize established guidelines, limited experience, and judgment to plan and achieve objectives.

• Strong organizational, time management, decision-making, and problem-solving capabilities.

🏝️ Benefits

• Flexible working hours with options for remote or work-from-home arrangements.

• Opportunities for skill development and career advancement.

• Generous vacation days to help you relax and recharge.

• A compensation package that aligns with your expectations, including resources for mental, physical, and financial well-being.

• Exclusive travel industry perks and discounts.

• A welcoming work environment that celebrates diversity.