Job Description

We are looking for a Principal security officer to join the AirOps TISO (Technical information Security office) team.Business contextIn its currrent configuration, AOP (AirOps) is covering Airport IT, Airline operations, and Passenger Self Service applications that are being offered to our customers, the airlines and airports.
To be able to offer protection to the assets (both software and hardware), security is a priority and a must.
We have around 150 applications and tools that we cater for, several hardware solutions for bag drops, self-service kiosks, biometric components and gates, we are one of the few organisations in Amadeus dealing with vertical solutions from hardware manufacturing up to software development.Security officer responsibilities in AirOpsThe security officers in our small security organisation are leading the security strategy and execution for the AirOps engineering organisation. Their responsibilities are (not exhaustive list):
- drive the security in the cloud journey for our teams (be it Azure or AWS or GCP)
- coordinate compliance of AirOps to the corporate security standards, the cloud HLDs, PCI, ISO, NIS2, etc.
- coordinate and lead the young community of WhiteHats and Security managers to achieve the goals in terms of SDL metrics and security KPIs
- proactively drive security improvements within the AirOps teams and participate/be epic owner in the SAFE trainsNot only the security officers have a role in the security governance, but they are to participate as well in guiding the teams:
- help making educated security architecture choices
- perform security asessments of applications and tools and propose, together with system architects and security managers, appropriate solutions that are generated through risk-based approaches
- be the ambassadors of the corporate security policies and standards, contribute to maintaining the risk map and the risk treatment plan
- collaborate closely with the BISO (business security office) team of AOPRequirements:
If you are:
- an experienced security professional (5+ years in relevant fields - application security, cloud security, security standards, SDL, etc. )
- certified in the areas of cloud technologies and/or security (an added plus)
- excited to work on challenging cloud security aspects and not afraid to think outside the box
- able to promote security awareness, have a good ability to explain, motivate, and convince
then we are looking forward to talk to you !

ScaleneWorks People Solutions