Senior Information Security GRC Analyst
TUI Group is the world’s number one integrated tourism business. The Security Domain is a global team within TUI Technology responsible forleading Information Security risk management across TUI. TUI Technologyis a multi-disciplinary team of experts across Security, Architecture, Engineering, DevOps and Agile Delivery providing services across the UK, Ireland, Sweden, Norway, Denmark, Finland, Germany, Belgium and The Netherlands.
At TUI we’re ambitious to become the leader in technology within the travel industry and to achieve this we are looking to build a capable, creative team who want to be a part of accomplishing that goal.
We never stop looking ahead, seeking new ways to delight our customers and grow our business. We recognise the power of digital and the massive contribution this brings to creating a truly unique and differentiated customer experience.
We are looking for a talented and dedicated securityprofessional to join the Governance, Risk and Compliance (GRC)team whichsupports theSecurity Domain in their responsibility to ensure information security risks are managed in alignment to our business goals across TUI Group.
As aSeniorInformation Security GRC Analystyou will perform a crucial role in supporting the GRC team’s activities. The role will take the lead on supporting the day-to-day delivery of our compliance programmes and Information Security Management System (ISMS) within our technology domains. You will manage the implementation of the frameworks, processes and reporting associated with the technical checks and balances. This role will require strong technical compliance skill alongside strong stakeholder managementand influencingskills.
ABOUT THE JOB
As aSeniorInformation Security GRC Analyst, you will have experience in the day-to-day management, delivery and tracking of actions towards our assurance and compliance programmes. You will have knowledge andpractical experience of regulatory compliance activities (e.g. GDPR) and have a view on how delivery and tracking of compliance actions could be accomplished.
This role will also be responsible forfillingpolicy and standards gaps across the company.
The role will deliver regular reporting to senior stakeholders within the organisation to inform decision making and appropriate investment.
This role will directly assist in enabling TUI to meet its strategic goals. Specifically, you will be responsible for delivering the following:
- Management and reporting on the status and performance of assurance and compliance programmes.
- Owning the day-to-day operation of TUI’s application assurance and cyber resilience programmes.
- Prioritising and managing the workload between the GRC Analysts in the team.
- Managing the documentation workflow and producingpolicy, process and guidelines in the appropriate format by liaising with a wide range of stakeholders, driving the approval process and publishing the documents.
- Supporting the wider GRC team (including the Information Security Officers and Information Security Managers) on a variety of GRC-related activities.
- Managing the roadmap, prioritising and fillinggaps in policy, standards, procedures and frameworksworking with the wider GRC teamand subject matter experts.
- Building roadmaps for continued compliance against applicable standards.
- Becoming a subject matter expert to IT and the business to support delivery against the standards.
- Manage and mature the CMDB of compliance/governance assets.
Our information security team works in collaboration with business and IT teams across our many businesses. You will build strong working relationships influence others to do the right thing to Protect our Smile.
ABOUT YOU
- Significant experience with managing compliance or assurance activity in a large travel/web/retail organisation.
- Strong ability in prioritising a wide breadth of tasks based on both internal and external factors.
- Excellent communication skills, both written and oral.
- Ability to produce clear documentation in English.
- Excellent organisational skills and attention to detail.
- Information Security Audit skills and experience.
- Strong experience in a large-scale enterprise organisation, preferably a retail or financial organisation.
- Strong knowledge of ISO27001, GDPR and associated legislation.
- Excellent influencing skills.
- Excellent interpersonal skills including persuasiveness and/or assertiveness skills.
- Relevant security qualifications (e.g. CISM, CISSP, Security+, PCI P etc.) or equivalent qualifications a nice to have.
- Experience usingstandards and frameworks such as NIST, OWASP, ITIL and COBIT.
- Ability to understand the needs, objectives and constraints of those in other teams.
OUR OFFER
- Being a valuable team member of TUI, the No.1 global and socially aware travel company.
- Competitive salary and benefits.
- Smart working (Flexible hours) and possibility of working remotely up to 100% or Hybrid from one of our offices.
- Develop yourself as part of a friendly, richly, diverse virtual international team.
If you want to know more about why TUI Group is the world's leading tourism group, and our continuing work in the diversity & inclusion space, simply visit careers.tuigroup.com
#TUIjobs #LI-AR1 #LI-Remote
Related content
-
Your career at TUI Working for TUI means creating unforgettable experiences. If you like working in the air, on the ground, or at sea, if you're an experienced pro or just out of school, you will find your new career in one of our brilliant teams.
-
About TUI We're team players. Holiday dream creators. Industry innovators. We’re TUI, a leading global travel and leisure experience company that makes holiday dreams come true for people around the world.
-
The best team in travel We’re a leading global travel and leisure experience company but our real deal is creating unforgettable holiday experiences for all our customers. Together with more than 65 000 colleagues, we are the best team in travel.
-
-
-
-
FAQ
-
-
-
-
-
-
Corporate operations Across Europe, Asia, and the Americas, TUI corporate roles all have one thing in common – a drive to give our customers a best-in-class leisure experience. You’ll be contributing to the success of our vision and values – whilst developing your own career path, too.
-
Cruise We power an impressive fleet of 16 cruise ships spanning three dynamic brands. Teams of passionate individuals not only setting the stage on board, but also behind the scenes at our vibrant head offices where we craft unforgettable memories for our guests.
-
Hotels & resorts The world is yours to explore at TUI. Join us for your dream career across our global destinations, where every role promises unforgettable experiences and a chance to leave a lasting impact on our guests worldwide.
-
Retail and Contact Centres Whether you’re engaging with our clients through our digital channels or offering personalised service in one of our 1,600+ retail stores across Europe, your role is pivotal in crafting unforgettable holidays.
-
Early careers Whether with an apprenticeship, a dual study program or an internship, we offer you a great variety of early career opportunities to start your journey with TUI.
-
Engineering & maintenance Having safe and reliable aircraft available when and where we need them is fundamental to delivering the excellent customer experience we’re famous for, and that all starts with our Engineering & Maintenance teams.
-
Airline Working for TUI in our Airline offers you a job like no other. Our passion is delivering unforgettable experiences for our customers. Our people make this happen.
-
Digital, Tech, & Data | Agile Evolution Find out what agile working means at TUI and how our Scrum Masters work towards making TUI a fully agile company
-
-
Digital, Tech, & Data | Digital Product As the world's leading tourism group, we're driven by technological passion and expertise. Find out how our Digital Products allow us to do just that.
-
Digital, Tech, & Data | Machine Learning and Automation Join our team to study, implement ML algorithms, and develop innovative machine learning applications.
-
ux-ui Our team is dedicated to crafting the most immersive and seamless digital journey for our customers
-
Digital, Tech, & Data | Meet our Colleagues Meet TUI's Tech and Data Science Team: Discover how our people-driven culture, built on trust, transparency, and a test-and-learn mindset, sets us apart.
-
Digital, Tech, & Data | Data Solutions Architecture Discover the Power of Data Solution Architecture at TUI Tech and unleash the business IT needs
-
Tech, Digital & Data TUI is influencing and shaping the digital world of travel which requires the latest and most innovative technologies, tools, systems and working methods. Explore careers in digital, tech & data.
-
Digital, Tech, & Data | Data Analytics, Engineering and Science Explore TUI's Data Analytics, Engineering and Science to discover how we leverage data-driven insights to transform the travel industry.
-
Retail Opportunities With over 1,600 retail stores across Europe, you will help to create unforgettable holidays for all of our customers with your personality, professionalism and personalised service. As the first point of contact for many of our customers, we are looking for dedicated people with a passion for travel and customer service.
-
Digital, Tech, & Data | What we do Discover how our dedicated IT teams at TUI drive digital transformation and ensure seamless processes
-
Digital, Tech, & Data Explore TUI's Software Development, API, and DevOps expertise and discover how we leverage cutting-edge technologies
-
Crystal Ski
-
Digital, Tech, & Data | Solutions Architecture Join TUI's Solution Architecture team, where you'll steer the course of our integration solutions
-
-
-
-
-
-
How we hire At TUI we want to make your journey as a candidate as simple and transparent as we possibly can. We truly believe that your application to join TUI should be as exciting as going on holiday. Learn more about our application process.
-
-
-
-
-
-
Come as you are. This is how we do diversity and inclusion at TUI...