Senior Risk Analyst – Information Security Risk Management

About the role

The Senior Risk Analyst joins BCD Travel’s Information Security Risk Management team to lead enterprise‑wide security risk assessments and maintain the central risk register. You will work with business owners, technology teams and third‑party suppliers to ensure risks are identified, evaluated and treated in line with global standards.

Key responsibilities

• Lead risk assessments for applications, infrastructure, cloud services, projects and third‑party suppliers, determining inherent and residual risk ratings.
• Identify control gaps, evaluate control design and effectiveness, and recommend practical treatment options.
• Maintain and continuously improve the centralized information security risk register, ensuring accurate ownership, treatment decisions and supporting evidence.
• Produce risk summaries, dashboards and management reports that highlight key exposures, treatment progress and emerging risks.

Required profile

• Bachelor’s degree in Information Security, Cybersecurity, Computer Science, Information Systems, Risk Management or related field, or equivalent experience.
• Proven experience conducting information security risk assessments using structured methodologies and frameworks such as ISO/IEC 27001, ISO/IEC 27002, ISO 31000 or NIST CSF.
• Strong analytical judgment, ability to influence stakeholders and operate independently in a global environment.

Required skills

• Risk assessment methodologies and risk register management.
• Knowledge of ISO/IEC 27001, ISO/IEC 27002, ISO 31000, NIST Cybersecurity Framework.
• Experience with third‑party risk assessments, reviewing ISO certifications, SOC reports, PCI DSS documentation, penetration test results.
• Relevant certifications such as CRISC, CISSP, CISM or ISO/IEC 27001 Lead Auditor/Implementer.

What we offer

• Flexible working hours and remote work opportunities.
• Generous vacation days and wellbeing tools.
• Career growth in a global travel‑technology leader.
• Travel industry perks and discounts.