Business Information Security Advisor

**Job no**: 523083
**Brand**: Product and Technology
**Work type**: Full time
**Location**: Queensland
**Categories**: Information & Technology

**_Ciao, _**Olá**,** **_こんにちは_**_, Bok_**

At** Flight Centre Travel Group (FCTG)** our purpose is to 'open up the world for those who want to see'. Every day, we give people all around the world the opportunity to experience something amazing - travel

As the Business Information Security Advisor, you will lead Security, Compliance and Assurance activities in your business pillar within the organisation globally.

If you have a strong understanding of security and privacy principles, standards and frameworks, Information Security in contracts and a sound understanding of the regulatory environment affecting the business, please apply

**Day to day**:

- Work with CISO, Risk and Business Leadership to identify risk exposure and assist in managing the security risk to the organisation within the risk appetite
- Review and evaluate new security technologies and practices for introduction into the organisation to reduce risk
- Implement a systematic and structured process for the identification and management of security risks within the scope of the individuals role
- Lead the implementation and management of an internal and external audit and security testing program to validate compliance with security policy
- Monitor new threats as they evolve and adjust risk management plans and security controls as necessary
- Assess the security of 3rd parties with whom FCTG has a requirement to share information for business processes
- Lead the design, implementation, operation and maintenance of the information security compliance and assurance management system for supply businesses as well as third party vendors
- Assist the CISO with the maintenance of the FCTG security policy and standard framework
- Lead the assessment of maturity and compliance to the FCTG security standards in Supply businesses.
- Work with business stakeholders to provide security guidance and input, creation of security documentation
- Act as a co-ordination point around ongoing collation of assurance documentation and audit activity
- Assist the CISO with Security and Compliance due diligence and onboarding as part of any merger and acquisition activity
- Assist the CISO, Business and Internal legal teams in the review, markup and negotiation of the Information Security requirements in Supply contracts
- Prepare written reports and in person briefings around areas of noncompliance and contribute to providing options to manage risks associated with non-compliance
- Feed emerging security requirements into ongoing assurance activities to ensure ongoing compliance risks are known, owned and managed.

**You'll be perfect for the role if you have**:

- Undergraduate degree in Technology or Information Security or similar
- 5+ years of experience in information security or technical operations role
- 2+ years managerial experience in an information security leadership role
- In-depth knowledge of Risk Frameworks such as ISO 31000
- In-depth knowledge of Security frameworks such as ISO27001/2, PCI DSS, SCA, SOC 2
- Legal contract review experience
- Experience and ability in creating meaningful security reporting
- CISSP
- CISM

**What you'll enjoy**
- Tick destinations off your bucket list with our discounts on travel and accommodation.
- Employee Share Scheme through Equate Plus.
- Access to in-house financial and health services, and internal 24/7 gym.
- Receive ongoing training and professional development through the Flight Centre Landing.
- Preference for internal progression through Brightness of Future: Employees have the right to see a clear pathway to achieving career ambitions.
- Global career opportunities in a network of brands and businesses at your fingertips.
- Proud Corporate Social Responsibility platform through the Flight Centre Foundation, and Brighter Futures programs.
- Various social events to promote networking, the celebration of wins, and sometimes just for fun (Global Gathering 2024 - Portugal, 2025 Los Angeles).

**We value you**

Flight Centre Travel Group is committed to creating an inclusive and diverse workplace that supports your unique identity to create better, safer experiences for everyone. We encourage you to _come as you are; _to foster inclusivity and collaboration. We celebrate you.

**Who we are**

Since our beginning, our vision has always been to _open up the world for those who want to see._

As a global travel retailer, our people come from all different backgrounds, and our connections spread to the far reaches of the globe - 20+ countries and counting Together, we are a _family _(we call ourselves _Flighties_).

We offer genuine opportunities for people to grow and evolve. We embrace new experiences, we celebrate the wins, seize all opportunities, and empower all of our people to find their **Brightness of Future**.

We encourage you to **D