Principal Specialist - Information Security

"
Main responsibilities:
Colloaborative:
Represent the security office in the RnD organisation.
Works with development and architect teams to propose solutions that follow the Amadeus standards.
Communicate with BISO/TISO to present solutions and maintain the risk register and mitigation plans.
Coordinate the elaboration, update, publishing and promotion of the Internal IT security architecture and its strategy.
Provide consultancy, guidance and support in Internal IT security architecture to other departments.
Ownership of the reporting and governance tasks for SDL and for compliance programs.
Own the security epic in the SAFE train if applicable
Drive threat modelling exercises for the applications in their scope, together with the TISO office security managers.
Provide second level support to White Hats for security-related aspects.
Promote coding best practices together with the White hats
Leading:
Ownership of the reporting and governance tasks for SDL and for compliance programs.
Own the security epic in the SAFE train if applicable
Drive threat modelling exercises for the applications in their scope, together with the TISO office security managers.
Provide second level support to White Hats for security-related aspects.
Promote coding best practices together with the White hats
Contribute to Internal IT security governance processes definition.
Contribute to global security risk analysis: conduct, coordinate or support security related Risk Analysis management process.
Contribute to Internal IT security awareness promotion.
Main stakeholders:
Delivery and Support Teams
Product Development Teams
Other stakeholders:
Heads of departments
Sales Teams
Client Project Managers
Client Delivery Team
Essential work experience
Experience in implementing Single Sign On on new and existing systems.
Experience in implementing Multifactor Authentication on new and existing systems.
Experience in implementing Privileged Access Managment systems
Experience with IT security design and assessment.
Experience working with cloud and on prem data centres.
Working with Windows and Linux systems
Working on access management systems for a large suite of systems and applications.

Desirable but not essential experience:
Working with Amadeus systems
Working with systems related to the aviation industry especially in the area of passenger processing
Skills:
AWS, IT Security, Identity Management
Knowledge and experience on any programming platform, preferably C#
Strong verbal, written and presentation skills with an adept ability to articulate in both technical and business language
Strong interpersonal skills with an ability to motivate others and gain buy in from key stakeholders.
Ability to collaborate with multiple teams
A self-starter, with a 'can do' attitude and a strong client focus
Have a strong sense of ownership and accountability for his/her work.
Meticulous work ethic
Educational qualification:
Relevant qualification in Information Technology, Software Engineering/Security or similar discipline"