Cyber Security and Technology Senior Manager, Booking Holdings
$162-198k
Zoom
Senior and Expert level
New York
Online travel agent
Open for applications
Online travel agent
1001+ employees
B2CHospitalityTravelMarketplacePaymentsFlightsFinancial Services
Open for applications
$162-198k
Zoom
Senior and Expert level
New York
1001+ employees
B2CHospitalityTravelMarketplacePaymentsFlightsFinancial Services
Company mission
To make it easier for everyone to experience the world.
Role
Who you are
- Bachelor's Degree or higher preferred
- Minimum 5-8 years progressive years of experience in cybersecurity, technology, and/or risk and control management within financial services industry, preferably in the financial services and payments industry or organization with money transmission licenses and a registered MSB
- Computer Hardware Knowledge, Computer Software Knowledge, Internet Applications, Networks, Operating Systems, cyber/Internet Security, Data Privacy/Protection, Analytic Risk Assessment, Problem-Solving, Threat Identification, Project Management, Business Collaboration Platforms (Zoom, WebEx, Teams, etc.) Google Doc
- Knowledge of cybersecurity-related threats and vulnerabilities, related to devices, networks, cloud, payment platforms, and physical environments
- Consulting, stakeholder engagement and relationship management skills
- Ability to work creatively and analytically in a problem-solving environment
- Flexibility to travel
- Excellent written and oral communication skills
- Ability to work in a highly matrixed organization in addition to global organization
- Experience with quickly changing US State and Federal regulatory environment
- Prefer previous experience working in financial services and payments industry
- Working knowledge of consumer regulations that apply to money service business (MSB) and providers of Prepaid Access
What the job involves
- Booking Holdings Financial Services-US is looking for a Cybersecurity and Technology Senior Manager with strong experience in Financial Services, specifically Payments or Money Transmission, to act as a critical partner to our business, helping develop, launch, and enable our mission to deliver a world-class payments operation to support Booking Holdings Inc’s brands
- The selected candidate will have the chance to witness firsthand the investment in digital technology that helps take the friction out of travel
- As an Information Security Senior Manager, you will support the delivery of the global Information Security and Risk management (ISMR) program’s goals and objectives at the Business level
- This position is being created to support the CISO with focus on security controls implementation and execution, aligned with regulatory requirements and standards
- This will mean that the individual will work with all business functions to ensure information risk is considered, logged, managed and remediated within the insights and understanding of the unique business context
- In this role you will report directly to the CISO
- You will work with the Business Unit’s management team to improve the information security posture by ensuring the consistent application, adaptation and alignment of BHFS’s policies and procedures. And to ensure all implemented controls provide value add and meet regulatory requirements
- You should have a good understanding of the cybersecurity framework mainly, regulatory requirements and security operational controls
- You will require a quick understanding of the company’s key processes, its unique business requirements, and the information security initiatives
- You will combine these information sources to address residual risk by supporting security enhancements within the area of responsibility and accountability
- You will also combine this information to design and implement reporting of security controls, security exceptions to drive continuous improvement plans for the business based on NIST Cybersecurity Framework, Federal Trade Commission (FTC) Safeguard Rule, New York Department of Financial Services (NYDFS) Part 500 Cybersecurity, and other state and federal regulatory requirements
- Ownership of the BHFS-US Cybersecurity and Technology Roadmap, managed security service delivery, and cybersecurity regulatory environment, and governance and compliance issues as they relate to cybersecurity
- Support the CISO to deliver tactical and strategic security improvements in line with the overarching security strategy for BHFS
- Development of security and technology policies, standards, and procedures
- Take full ownership of a continuous improvement plan.Monitoring of the security control implementation within the business unit in collaboration with the security capability area leads and security program managers
- Strategic development of cybersecurity and technology metrics, and reporting, for measuring the achievement of cybersecurity and technology key performance and risk objectives
- Assist with building a talented team to address threat identification and mitigation, incident response, intelligence gathering and information sharing
- Help the business unit understand and mitigate the cyber and fraud risks identified in line with the company's risk appetite
- Knowledge of cybersecurity-related threats and vulnerabilities and tools used to mitigate the same
- Support the effective collaboration between the business unit teams and the Security service teams
- Support escalations for information security issues identified by security teams and/or the business units themselves
- Guide and support the business unit in following the appropriate security procedures such as the risk assessments and the exception management exercises, ensuring completeness and adherence to standard baselines of BHFS security policies
- Good understanding of security best practices including ISO 27001, NIST Risk Management Framework, NIST 800-53 controls, and PCI DSS
- Collaborate with Risk to conduct the Cybersecurity Risk Assessment and controls testing. Collaborate with Auditors to achieve the National Institute of Standards and Technology (NIST) Cybersecurity Maturity objectives
- Development of roadmaps, strategies, and the design of assigned cybersecurity and technology areas
- Work with security insights teams to ensure that security metrics and reports receive the right level of attention in the target business unit
- Participate in a variety of BHFS-US enterprise cybersecurity and technology projects, including Identity and Access Management (IAM), Vendor Risk Management (VRM), Data Governance and Data Loss Prevention (DLP), Cloud Security, and other technology initiatives as they arise
- Assist the CISO-US with all regulatory reporting of issue management and risk mitigation
- Collaborate with cross-functional BHFS teams and cross-regional BHI Brands to create strong ties, to enhance capabilities, and find ways to mitigate threats
- Assist BHFS-US CISO, CCO, and CFO with BHFS-US Business Continuity Plan and Disaster Recovery Program to meet US State money transmission license (MTL) and Federal regulatory requirements
Our take
Booking Holdings is the global heavyweight in online travel and related services, with a footprint spanning over 220 countries and territories. A the parent company of familiar names like Booking.com, Priceline, Agoda, Rentalcars.com, KAYAK, and OpenTable, it's the quiet force powering millions of trips, dinners, and adventures around the world.
The company is continuously strengthening its portfolio too, by expanding what its brands can offer. For instance, Priceline's partnership with Musement (the leading tours and activities company) means travelers can now book experiences and excursions right alongside flights and hotels.
And on the tech front, Booking Holdings is investing in its future with a new technology center, focused on enhancing its fiance systems and driving smarter collaboration across fintech and other vital areas. In a fiercely competitive area, Booking Holdings really does stand tall as a market leader and is ready to ride the continued wave of travel demand.
Steph
Company Specialist at Welcome to the Jungle
Insights
16% employee growth in 12 months
Company
Company benefits
- Mental Health Support
- Fitness Reimbursement
- Health Benefits
- Insurance Coverage
- Retirement Plan
- Additional Benefits
- Travel Benefits
- Time off
- Tuition Reimbursement
- Hybrid Working
Company HQ
Norwalk, CT
Leadership
Glenn Fogel
(CEO & President)Joined Booking Holdings in 2000 as VP of Corporate Development and has held various roles since, becoming CEO and President in 2017.
Salary benchmarks
We don't have enough data yet to provide salary benchmarks for this role.
Submit your salary to help other candidates with crowdsourced salary estimates.
Share this job
View 3 more jobs at Booking Holdings