Address
Form of workAt Flight Centre Travel Group (FCTG) our purpose is to 'open up the world for those who want to see'. Every day, we give people all around the world the opportunity to experience something really amazing – travel!
The Information Security Officer role will lead Security, Compliance and Assurance activities in their business pillar within the organisation globally. You'll have a strong understanding of security and privacy principles, standards and frameworks, Information Security in contracts and a sound understanding of the regulatory environment affecting the business.
If you have a keen understanding of the business drivers affecting security, enjoy consulting with business leaders and other support businesses around Security within business operations, please apply!
Key Responsibilities:
Security Risk Management
- Work with CISO, Risk and Business Leadership to identify risk exposure and assist in managing the security risk to the organisation within the risk appetite
- Review and evaluate new security technologies and practices for introduction into the organisation to reduce risk
- Implement a systematic and structured process for the identification and management of security risks within the scope of the individuals role
Security Governance and Risk Management
- Lead the implementation and management of an internal and external audit and security testing program to validate compliance with security policy
- Monitor new threats as they evolve and adjust risk management plans and security controls as necessary
- Assess the security of 3rd parties with whom FCTG has a requirement to share information for business processes
- Ensure regular meaningful security reporting occurs
Security Compliance and Assurance Management
- Lead the design, implementation, operation and maintenance of the Information Security compliance and assurance management system for supply businesses as well as third party vendors
- Assist the CISO with the maintenance of the FCTG security policy and standard framework
- Lead the assessment of maturity and compliance to the FCTG security standards in Supply businesses.
- Work with product and engineering teams to ensure products and applications are designed and implemented in line with security policy, and best practice
- Work with business stakeholders to provide security guidance and input, creation of security documentation
- Act as a co-ordination point around ongoing collation of assurance documentation and audit activity
- Assist the CISO with Security and Compliance due diligence and onboarding as part of any merger and acquisition activity
Security Contract Management
- Assist the CISO, Business and Internal legal teams in the review, markup and negotiation of the Information Security requirements in Supply contracts
- Prepare written reports and in person briefings around areas of noncompliance and contribute to providing options to manage risks associated with non-compliance
- Feed emerging security requirements into ongoing assurance activities to ensure ongoing compliance risks are known, owned and managed
Required experience:
- 5+ years of experience in Information Security or technical operations role
- 2+ years managerial experience in an Information Security leadership role
- In-depth knowledge of Risk Frameworks such as ISO 31000
- In-depth knowledge of Security frameworks such as ISO27001/2, PCI DSS, SCA, SOC 2
- Legal contract review experience
- Experience and ability in creating meaningful security reporting
- Undergraduate degree in Technology or Information Security or similar (desirable)
- CISSP (desirable)
- CISM (desirable)
Benefits:
- Tick destinations off your bucket list with our discounts on travel and accommodation
- Employee Share Scheme through Equate Plus
- Access to in-house financial and health services, internal 24/7 gym and End-of-Trip Facility
- Closing the Gender Gap in Super Balances! FCTG paid super contributions during parental leave & top up payments when Flightie parents return to work for the first 2 years!
- Receive ongoing training and professional development
- Hybrid working model
- Preference for internal progression through Brightness of Future: Employees have the right to see a clear pathway to achieving career ambitions
- Global career opportunities in a network of brands and businesses at your fingertips
- Proud Corporate Social Responsibility platform through the Flight Centre Foundation, and Brighter Futures programs
- Opportunity to attend global awards events, including Global Gathering (Las Vegas 2022, Bali 2023 and Lisbon 2024)
- Various social events to promote networking, the celebration of wins, and sometimes just for fun!
We value you...
Flight Centre Travel Group is committed to creating an inclusive and diverse workplace that supports your unique identity to create better, safer experiences for everyone. We encourage you to come as you are; to foster inclusivity and collaboration. We celebrate you.
Who we are...
Since our beginning, our vision has always been to open up the world for those who want to see.
As a global travel retailer, our people come from all different backgrounds, and our connections spread to the far reaches of the globe - 20+ countries and counting! Together, we are a family (we call ourselves Flighties).
We offer genuine opportunities for people to grow and evolve. We embrace new experiences, we celebrate the wins, seize all opportunities, and empower all of our people to find their Brightness of Future.
We encourage you to DREAM BIG through collaboration and innovation, and make sure you are supported to make incredible ideas a reality. Together, we deliver quality, innovative solutions that delight our customers and achieve our strategic priorities.
Irreverence. Ownership. Egalitarianism
#LI-KC1#LI-Hybrid
