Business Security Analyst

Role Description

At Booking.com, our mission is to make it easier for everyone to experience the world. As our technology landscape, regulatory environment, and product ecosystem continue to evolve, we need practical and scalable approaches to risk, controls, and compliance that support the business without slowing it down.

About the team:

An individual contributor role assigned to support a Business Information Security Officer (BISO) who is assigned to one or more Business Units (BU). The role is an embedded Security, Safety, & Fraud (SS&F) analyst responsible for supporting the BISO in driving the SS&F strategy within each BU and partnering with SS&F to support delivery of products, tools, and services that are fit for purpose. Within the BU, the BSA works primarily with the Tech and Product teams with the aim of improving the security, safety, and fraud risk posture of the BU. The role supports the BU’s adoption of SS&F capabilities and standards and the continuous improvement of those capabilities based on BU feedback and requirements. By identifying BU gaps and risks related to SS&F, the BSA supports the BISO in enabling the business to achieve its goals while addressing its most relevant risks.

About the role:

Reporting to a Risk & Compliance Manager, the BSA is an embedded analyst enabling the BISO to define and oversee the business unit’s security, safety, and fraud roadmap so the BU can meet its objectives in a secure and compliant manner. The BSA understands the security, safety, and fraud threat landscape and risk posture, and how those apply in their respective business units. More specifically, the BSA:

Key Responsibilities and Duties:

• Assess, identify, report, and monitor SS&F risks within the BU by supporting the BISO with periodic, relevant insights to BU leadership that drive risk-based decisions and prioritization of actions
• Champion and promote SS&F awareness in the BU
• Support the building of productive relationships with business stakeholders
• Represent the BISO at meetings and act on their behalf as requested
• Support the BISO in delivering operational and tactical security improvements in line with the overarching security strategy
• Understand and stay up to date with BU-specific SS&F-related security regulations
• Support collaboration between the BU and SS&F
• Provide feedback and BU requirements toward SS&F capabilities and services for continuous improvement
• Support and analyze SS&F risk acceptances
• Support and analyze SS&F risk remediation and mitigation activities
• Support and analyze SS&F incident management activities

Qualifications and Skills:

• 3 to 5 years of experience in one or more of Cyber Security, Safety, and Fraud topics
• Understanding of technology processes and practices such as change management, Secure Software Development Lifecycle, Identity and Access Management, IR, Incident Management, and Data Governance
• Experience in IT Risk Management
• Excellent English communication skills
• Experience in stakeholder management and the ability to effectively engage and influence individual technical staff
• Creative problem-solver able to communicate concepts to a limited audience and create clarity
• Additional cybersecurity qualifications such as CISM, CISSP, CISA, CRISC, AIGP, or similar are an advantage
• Organized, with attention to detail and execution skills
• Experience in the analysis and assessment of security programs
• Good understanding of security best practices and standards such as NIST Cybersecurity Framework, ISO27001, and PCI DSS
• Experience participating in security, safety, and fraud incident response activities
• Bachelor’s degree in computer science or a related field, or equivalent experience

Benefits & Perks:

• Annual paid time off and a generous paid leave scheme including parent, grandparent, bereavement, and care leave
• Hybrid working, including flexible working arrangements and up to 20 days per year working from abroad (home country)
• Industry-leading product discounts of up to 1400 per year for yourself, including automatic Genius Level 3 status and Booking.com wallet credit