Cyber Security and Technology Senior Manager

• Ownership of the BHFS-US Cybersecurity and Technology Roadmap, managed security service delivery, and cybersecurity regulatory environment, and governance and compliance issues as they relate to cybersecurity.

• Support the CISO to deliver tactical and strategic security improvements in line with the overarching security strategy for BHFS.

• Development of security and technology policies, standards, and procedures.

• Take full ownership of a continuous improvement plan.Monitoring of the security control implementation within the business unit in collaboration with the security capability area leads and security program managers.

• Strategic development of cybersecurity and technology metrics, and reporting, for measuring the achievement of cybersecurity and technology key performance and risk objectives

• Assist with building a talented team to address threat identification and mitigation, incident response, intelligence gathering and information sharing.

• Help the business unit understand and mitigate the cyber and fraud risks identified in line with the company's risk appetite.

• Knowledge of cybersecurity-related threats and vulnerabilities and tools used to mitigate the same.

• Support the effective collaboration between the business unit teams and the Security service teams.

• Support escalations for information security issues identified by security teams and/or the business units themselves.

• Guide and support the business unit in following the appropriate security procedures such as the risk assessments and the exception management exercises, ensuring completeness and adherence to standard baselines of BHFS security policies

• Good understanding of security best practices including ISO 27001, NIST Risk Management Framework, NIST 800-53 controls, and PCI DSS.

• Collaborate with Risk to conduct the Cybersecurity Risk Assessment and controls testing.  Collaborate with Auditors to achieve the National Institute of Standards and Technology (NIST) Cybersecurity Maturity objectives.  

• Help the business unit understand and mitigate the cyber and fraud risks identified in line with the company's risk appetite.

• Development of roadmaps, strategies, and the design of assigned cybersecurity and technology areas

• Work with security insights teams to ensure that security metrics and reports receive the right level of attention in the target business unit.

• ●Participate in a variety of BHFS-US enterprise cybersecurity and technology projects, including Identity and Access Management (IAM), Vendor Risk Management (VRM), Data Governance and Data Loss Prevention (DLP), Cloud Security, and other technology initiatives as they arise

• ●Assist the CISO-US with all regulatory reporting of issue management and risk mitigation

• ●Collaborate with cross-functional BHFS teams and cross-regional BHI Brands to create strong ties, to enhance capabilities, and find ways to mitigate threats.

• ●Assist BHFS-US CISO, CCO, and CFO with BHFS-US Business Continuity Plan and Disaster Recovery Program to meet US State money transmission license (MTL) and Federal regulatory requirements

Knowledge and Skills

• Bachelor's Degree or higher preferred

• Minimum 5-8 years progressive years of experience in cybersecurity, technology, and/or risk and control management within financial services industry, preferably in the financial services and payments industry or organization with money transmission licenses and a registered MSB

• Computer Hardware Knowledge, Computer Software Knowledge, Internet Applications, Networks, Operating Systems, cyber/Internet Security, Data Privacy/Protection, Analytic Risk Assessment, Problem-Solving, Threat Identification, Project Management, Business Collaboration Platforms (Zoom, WebEx, Teams, etc.) Google Doc

• Knowledge of cybersecurity-related threats and vulnerabilities, related to devices, networks, cloud, payment platforms, and physical environments

• Consulting, stakeholder engagement and relationship management skills

• Ability to work creatively and analytically in a problem-solving environment.

• Flexibility to travel

• Excellent written and oral communication skills

• Ability to work in a highly matrixed organization in addition to global organization

• Experience with quickly changing US State and Federal regulatory environment

• Prefer previous experience working in financial services and payments industry

• Working knowledge of consumer regulations that apply to money service business (MSB) and providers of Prepaid Access

EEO Statement:

Booking Holdings is an equal opportunity employer in accordance with all applicable federal, state and local laws. We ensure equal employment opportunity to all employees and applicants without discrimination or harassment based on race, religious creed, color, age, sex, sexual orientation, gender identity, national origin, religion, marital status, medical condition, disability, military service, pregnancy, childbirth and related medical conditions, or any other classification protected by federal, state, or local law.

Booking Holdings also extends this policy to every phase of the employment process including, but not limited to, recruitment, selection, placement, transfer, training and development, position elimination, restructure, promotion, compensation, benefits, layoffs, termination, and all other conditions or privileges of employment. Booking Holdings and its Affiliated Companies are Equal Employment Opportunity employers and welcome all job seekers including individuals with disabilities and veterans with disabilities. If you have a disability and believe you need reasonable accommodation in order to search for a job opening or apply for a position, please email [email protected] with your request. M/F/V/D/S