BISO Senior Security Specialist - EURO

We're the team that keeps airports moving, airlines flying smoothly, and borders open. Our tech and communication innovations are the secret behind the success of the world's air travel industry.

You'll find us at 95% of international hubs. We partner closely with over 2,500 transportation and government clients, each with their own unique needs and challenges. Our goal is to find fresh solutions and cutting-edge tech to make their operations run like clockwork. Want to be a part of something big?

Are you ready to love your job? The adventure begins right here, with you, at SITA.

As Business Information Security Office (BISO) Senior Security Specialist – Europe, you will function as the security interface and single point of contact (SPOC) for enterprise security for an assigned geographic region (GEO). As a trusted advisor to the GEO and its customers, the BISO Senior Security Specialist helps the business achieve its objectives effectively while not compromising on security, by providing advice and guidance to ensure activities are aligned to SITA’s overall enterprise security governance, policies, standards, and strategic security improvement program.

To achieve this, the BISO will work closely with the GEO stakeholders to gain a deep understanding of their business in order to help balance information security and regulatory cybersecurity compliance risk, and risk-based discussions.

As part of the BISO team, you will work closely with the CISO and other BISO team members to help align practices consistently across the entire organization, and to drive security transformations that are holistic while meeting customer requirements and best practices in security and compliance. The BISO Senior Security Specialist will understand the key assets and processes, identify and evaluate risks and controls, and suggest incremental controls or risk mitigation strategies where necessary.

This role will liaise between the GEO business leadership, the Product Security team, and Enterprise Security Teams, keeping clear lines of communication including but not limited to:

• Transparency to the business on upcoming security initiatives
• Reporting of security risks to the CISO and appropriate committees
• Providing input to the Information Security Improvement Program
• Input into business processes related to information security incident response process, identifying impact to the business and to customers, helping to shape remediation, and developing external and internal message points.

You will be accountable for combining business acumen with technical knowledge as the BISO assists in improving the information security posture with respect to delivering services and partnering with the GEO leadership and reporting to the Chief Information Security Officer (CISO).

The world is changing. Are you ready to define the future of travel with us?

• Participating in managing a documented Information Security Program and supporting security strategy for the GEO
• Ensure the program is aligned with SITA Information Security Programs Governance, Policies, and Standards while monitoring and reporting on risks and documented exceptions
• Provide input into the enterprise Governance, Security Policy, and Standards revisions
• Ensure awareness of all applicable regulatory, legal, and contractual obligations
• Ensure clear lines of communication between GEO, the Enterprise Security Teams, Product, and Operations security teams.
• Act as the primary local single point of contact for security and provide a priority escalation path for significant security concerns and inquiries
• Engage with clients and customers as needed to assist the business to achieve its objectives by representing our security program, supporting internal and external audits, assisting in customer communication of security incidents, etc.
• Participate in region-related conferences, client-facing engagement, industry forums to represent SITA’s Cybersecurity program
• Evangelizing security awareness across the GEO
• Drive information security risk management, policy compliance, data protection, education, and awareness
• Develop and maintain…