Cyber Security and Technology Senior Manager, Booking Holdings
$162-198k
Zoom
Senior and Expert level
New York
Online travel agent
Be an early applicant
Online travel agent
1001+ employees
B2CHospitalityTravelMarketplacePaymentsFlightsFinancial Services
Be an early applicant
$162-198k
Zoom
Senior and Expert level
New York
1001+ employees
B2CHospitalityTravelMarketplacePaymentsFlightsFinancial Services
Company mission
Making it easier for everyone to experience the world.
Role
Who you are
- Bachelor's Degree or higher preferred
- Minimum 5-8 years progressive years of experience in cybersecurity, technology, and/or risk and control management within financial services industry, preferably in the financial services and payments industry or organization with money transmission licenses and a registered MSB
- Computer Hardware Knowledge, Computer Software Knowledge, Internet Applications, Networks, Operating Systems, cyber/Internet Security, Data Privacy/Protection, Analytic Risk Assessment, Problem-Solving, Threat Identification, Project Management, Business Collaboration Platforms (Zoom, WebEx, Teams, etc.) Google Doc
- Knowledge of cybersecurity-related threats and vulnerabilities, related to devices, networks, cloud, payment platforms, and physical environments
- Consulting, stakeholder engagement and relationship management skills
- Ability to work creatively and analytically in a problem-solving environment
- Flexibility to travel
- Excellent written and oral communication skills
- Ability to work in a highly matrixed organization in addition to global organization
- Experience with quickly changing US State and Federal regulatory environment
- Prefer previous experience working in financial services and payments industry
- Working knowledge of consumer regulations that apply to money service business (MSB) and providers of Prepaid Access
What the job involves
- Booking Holdings Financial Services-US is looking for a Cybersecurity and Technology Senior Manager with strong experience in Financial Services, specifically Payments or Money Transmission, to act as a critical partner to our business, helping develop, launch, and enable our mission to deliver a world-class payments operation to support Booking Holdings Inc’s brands
- The selected candidate will have the chance to witness firsthand the investment in digital technology that helps take the friction out of travel
- As an Information Security Senior Manager, you will support the delivery of the global Information Security and Risk management (ISMR) program’s goals and objectives at the Business level
- This position is being created to support the CISO with focus on security controls implementation and execution, aligned with regulatory requirements and standards
- This will mean that the individual will work with all business functions to ensure information risk is considered, logged, managed and remediated within the insights and understanding of the unique business context
- In this role you will report directly to the CISO
- You will work with the Business Unit’s management team to improve the information security posture by ensuring the consistent application, adaptation and alignment of BHFS’s policies and procedures. And to ensure all implemented controls provide value add and meet regulatory requirements
- You should have a good understanding of the cybersecurity framework mainly, regulatory requirements and security operational controls
- You will require a quick understanding of the company’s key processes, its unique business requirements, and the information security initiatives
- You will combine these information sources to address residual risk by supporting security enhancements within the area of responsibility and accountability
- You will also combine this information to design and implement reporting of security controls, security exceptions to drive continuous improvement plans for the business based on NIST Cybersecurity Framework, Federal Trade Commission (FTC) Safeguard Rule, New York Department of Financial Services (NYDFS) Part 500 Cybersecurity, and other state and federal regulatory requirements
- Ownership of the BHFS-US Cybersecurity and Technology Roadmap, managed security service delivery, and cybersecurity regulatory environment, and governance and compliance issues as they relate to cybersecurity
- Support the CISO to deliver tactical and strategic security improvements in line with the overarching security strategy for BHFS
- Development of security and technology policies, standards, and procedures
- Take full ownership of a continuous improvement plan.Monitoring of the security control implementation within the business unit in collaboration with the security capability area leads and security program managers
- Strategic development of cybersecurity and technology metrics, and reporting, for measuring the achievement of cybersecurity and technology key performance and risk objectives
- Assist with building a talented team to address threat identification and mitigation, incident response, intelligence gathering and information sharing
- Help the business unit understand and mitigate the cyber and fraud risks identified in line with the company's risk appetite
- Knowledge of cybersecurity-related threats and vulnerabilities and tools used to mitigate the same
- Support the effective collaboration between the business unit teams and the Security service teams
- Support escalations for information security issues identified by security teams and/or the business units themselves
- Guide and support the business unit in following the appropriate security procedures such as the risk assessments and the exception management exercises, ensuring completeness and adherence to standard baselines of BHFS security policies
- Good understanding of security best practices including ISO 27001, NIST Risk Management Framework, NIST 800-53 controls, and PCI DSS
- Collaborate with Risk to conduct the Cybersecurity Risk Assessment and controls testing. Collaborate with Auditors to achieve the National Institute of Standards and Technology (NIST) Cybersecurity Maturity objectives
- Development of roadmaps, strategies, and the design of assigned cybersecurity and technology areas
- Work with security insights teams to ensure that security metrics and reports receive the right level of attention in the target business unit
- Participate in a variety of BHFS-US enterprise cybersecurity and technology projects, including Identity and Access Management (IAM), Vendor Risk Management (VRM), Data Governance and Data Loss Prevention (DLP), Cloud Security, and other technology initiatives as they arise
- Assist the CISO-US with all regulatory reporting of issue management and risk mitigation
- Collaborate with cross-functional BHFS teams and cross-regional BHI Brands to create strong ties, to enhance capabilities, and find ways to mitigate threats
- Assist BHFS-US CISO, CCO, and CFO with BHFS-US Business Continuity Plan and Disaster Recovery Program to meet US State money transmission license (MTL) and Federal regulatory requirements
Our take
Booking Holdings is the world’s leading provider of online travel & related services, operating in more than 220 countries. They are the parent company of Booking.com, Priceline, Agoda, Rentalcars.com, KAYAK, and OpenTable.
The company is consistently strengthening its subsidiary companies by expanding its service portfolios, for example, Priceline has partnered with Musement (the leading tours and activities company) enhancing travelers’ vacation experiences by allowing customers to book activities and excursions.
Booking Holdings has also opened a new tech center as it works to deepen its finance systems and software development to enable collaboration across fintech and other key functions across its brands.
While the travel market is highly competitive, with other online travel agencies like TripAdvisor, Expedia, and AirBNB making strong efforts to expand their presence, Booking Holdings is a powerhouse leader in the market and is well-positioned to continue capitalizing on the booming travel market.
Steph
Company Specialist at Welcome to the Jungle
Insights
16% employee growth in 12 months
Company
Company benefits
- Health/Dental/Vision/Life Insurance
- FSA & HSA
- 401k
- Hybrid Workplace - "5 Day Flex" Policy
- Maternity & Paternity Leave
- Vacation & PTO
- Employee Assistance Program
- Employee Discount
Company HQ
Norwalk, CT
Leadership
Glenn Fogel
(CEO, not founder)Current CEO of Booking.com. Held a variety of positions at Booking Holdings, including Head of Worldwide Strategy and Planning and Executive Vice President of Corporate Development. Former Vice President at Morgan Stanley.
Salary benchmarks
We don't have enough data yet to provide salary benchmarks for this role.
Submit your salary to help other candidates with crowdsourced salary estimates.
Share this job
View 3 more jobs at Booking Holdings