Analyst II – Information Security

Role Overview

• Collaborate with internal departments on Client related matters and provide detailed feedback from Clients back to BCD Information Security and the business
• Be the point of contact for complaints and escalate issues as appropriate
• Coordinate and champion Security Request for Proposal(RFP) database repository
• Lead the development of RFP responses and evaluate responses for accuracy
• Create and facilitate responses to customer inquiries originating from RFP and assessments
• Keep up to date Information security databases/repositories using Ombud, Archer, OneTouch or other tools and collect and maintain necessary audit evidence
• Lead internal and external security communication efforts within BCD Travel, provide formal responses to customer security inquiries, complete and participate in Client security assessments and handle information security audits, risk remediation and mitigation efforts
• Be knowledgeable on Artificial Intelligence (AI) and possess skills to sift through data using analytical tools and techniques
• Collaborate with stakeholders to ensure AI aligns with organizational values and expectations
• Ensure AI controls are aligned, validating output results to ensure accuracy and integrity of information
• Identify and report on AI-related risks and concerns associated with internal AI use to support clients and business related assessments
• Work with the development, business, sales and legal teams and advise on design and maintenance of effective information security controls compliant with ISO 27001, NIST 800-53, PCI, SOC, GDPR
• Support the Information Security goals and challenges of our organization by providing a bridge from the centralized security function to the business, and assist with creation of applicable standard operating procedures

Requirements

• Bachelor’s Degree (B.A., B.S.), or equivalent combination of education and experience either in Information Protection, Computer Science, Management Information Systems, or related curriculum
• Professional experience required, preferably with information security, sales, legal, account and supplier management, travel industry and RFP support
• You have relevant general Information Technology experience
• Knowledge of ISO Compliance Series, NIST, Artificial Intelligence (AI), PCI, ITIL
• Must be able to use pre-established guidelines, limited experience and judgment to plan and accomplish goals
• Strong organizational, time management, decision making, and problem solving skills

Benefits

• Flexible working hours and work-from-home or remote opportunities
• Opportunities to grow your skillset and career
• Generous vacation days so you can rest and recharge
• A compensation package that feels fair to you, including mental, physical, and financial wellbeing tools
• Travel industry professional perks and discounts
• An inclusive work environment where diversity is celebrated