This list contains only the countries for which job offers have been published in the selected language (e.g., in the French version, only job offers written in French are displayed, and in the English version, only those in English).
This role will be advertised for a minimum of 14 days, but it may close at any time after that period. TUI Group is the world’s number one integrated tourism business. The Search Domain is a global area within TUI technology responsible for the Search part of the customer journey on the Website and to provide search capabilities for B2B. We are a multi-disciplinary team of experts across Architecture, Engineering, DevOps and Agile Delivery providing services across the UK, Ireland, Sweden, Norway, Denmark, Finland, Spain, Germany, Belgium and The Netherlands. We never stop looking ahead, seeking new ways to delight our customers and grow our business. We recognise the power of digital and the massive contribution this brings to creating a truly unique and differentiated customer experience. We are looking for a talented and dedicated manager to join the Product and Engagement Domain organisation which is the Sales and Customer facing area of TUI. As an Information Security Manager within our Information Security community of practice you will perform a crucial role in protecting our IT organisation.
Job Responsibility:
Promote a security-first culture at TUI, contributing to the delivery of an information security strategy that addresses evolving business risks and empowers our Domain to deliver the prioritised roadmap
Lead collaboration with stakeholders to communicate and embed secure ways of working with regular cadence and engagement, protecting the TUI brand and its customers
Drive adoption of and adherence to security policies, standards, and controls through expert advice and guidance, while protecting our most critical assets
Manage local security incidents effectively, ensuring lessons learned and audit findings are remediated appropriately
Ensure effective security operations including vulnerability scanning and patching, while protecting the integrity, availability, authenticity, non-repudiation and confidentiality of information and data
Work collaboratively with business and IT teams across our many businesses, building strong relationships and influencing others to do the right thing to protect our smile
Requirements:
Demonstrable experience of leading an information security capability for a large business unit
Good understanding of security within agile development processes and in Amazon Web Services environments
Adept understanding of security operations and security incident management
Proven experience in implementing Information Security Management Systems in a large organisation
Familiarity with relevant certifications such as AWS Cloud Fundamental/Practitioner, ISO27001 Lead Implementer, COMPTIA Security+, CISMP/CISSP/CISM/CISA
Excellent planning, organisation and effective communication skills with the ability to gain commitment from stakeholders to reduce information security risks
Analytical approach to problems
Team player with ability to think positively in challenging situations
Commercial awareness when making proposals, taking actions or helping support decision making
What we offer:
Attractive remuneration
Discretionary bonus schemes
Generous travel benefits
Extensive health & well-being support
Dynamic working environment
Access to the TUI Learning Hub
Opportunities to work on global projects and teams
Involvement with local charity and sustainability initiatives like the TUI Care Foundation