SPECIALIST - INFORMATION SECURITY

SPECIALIST - INFORMATION SECURITY

Summary of the Role

As a Business Information Security Specialist, you'll support Open Platform Security by coordinating security assurance, compliance, audit, and operational security activities across cloud platforms and related technologies.

You'll work with platform teams, security specialists, auditors, risk and compliance professionals, and technology stakeholders to help ensure security controls are operating effectively, findings are addressed on time, and audit and certification readiness is maintained. You’ll also contribute to continuous improvement through automation, reporting, and responsible use of Artificial Intelligence (AI) capabilities.

In This Role You'll / Your Main Responsibilities

• Coordinate security assurance and compliance activities, including Payment Card Industry Data Security Standard (PCI DSS), International Organization for Standardization 27001 (ISO 27001), Service Organization Control (SOC), General Data Protection Regulation (GDPR), and other relevant assessments by supporting preparation, evidence collection, control reviews, and remediation follow-up.
• Coordinate penetration-testing activities from planning through remediation, partnering with technology teams and security stakeholders to ensure findings are prioritized, tracked, retested, and resolved within agreed timelines.
• Support operational security activities, including firewall-review processes, security-service requests, ServiceNow queue management, ownership coordination, and documentation maintenance.
• Assess security requirements for projects, technology changes, and new implementations, providing practical recommendations while maintaining policies, standards, procedures, and compliance records.
• Develop reporting, dashboards, and automation solutions using tools such as ServiceNow, Microsoft Azure, Power BI, and responsible AI capabilities to improve visibility, efficiency, and security-assurance processes.

About the Ideal Candidate

• Relevant experience in information security, security assurance, governance, risk, compliance, audit, or related areas.
• Knowledge of PCI DSS, ISO 27001, security audits, control validation, evidence management, vulnerability remediation, and cloud-security practices.
• Experience using ServiceNow or similar workflow-management tools, along with reporting and visualization solutions such as Power BI.
• Effective communication, stakeholder coordination, documentation, and problem-solving skills, with the ability to collaborate across global and cross-functional teams.
• Ability to take responsibility for assigned work, maintain attention to detail, meet agreed timelines, and contribute to automation and continuous-improvement initiatives.

Preferred Certifications and Skills

• Certifications such as Certified Information Systems Auditor (CISA), ISO 27001 Implementer, PCI Professional (PCIP), Certified Information Systems Security Professional (CISSP), Certified Information Security Manager (CISM), or Certified Cloud Security Professional (CCSP).
• Knowledge of cloud-security practices across Microsoft Azure, Amazon Web Services (AWS), or similar cloud environments.
• Experience supporting vulnerability-management programs, penetration-testing governance, compliance activities, or workflow automation initiatives.
• Understanding of responsible AI principles and AI-assisted security operations.

Expected Outcomes

• Maintained readiness for PCI DSS and other applicable compliance and assurance activities.
• Timely and accurate collection and submission of audit evidence.
• Effective coordination and resolution of penetration-testing findings and compliance actions.
• Reliable execution of firewall reviews, operational-security processes, and security-service requests.
• Improved visibility through meaningful reporting, automation, and collaboration across Open Platform, security, risk, compliance, and audit teams.

What We Can Offer You

• 🎯 A critical mission and purpose - At Amadeus, you'll power the future of travel with a critical mission and extraordinary purpose.
• 🌎 A truly global DNA - Everything at Amadeus is global, from our people to our business, which translates into our footprint, processes, and culture.
• 🎓 Great opportunities to learn - Learning happens all the time and in many ways at Amadeus, from on-the-job training to formal activities and daily interactions.
• 🤗 A caring environment – Amadeus fosters a caring environment that supports both professional growth and personal well-being.
• 💰 A complete rewards offer - Amadeus provides attractive compensation packages, including salary, bonus, caregiving and health benefits.
• 🌟 A flexible working model - Embrace our flexible working model, enabling you to excel wherever and however you work best.
• 🌈 A diverse, equitable, and inclusive community – We are committed to enabling each employee to reach their full potential by fostering a culture of belonging and fair treatment.
• 📈 A Reliable Company - Trust and reliability are fundamental to shaping our relationships with customers, partners, and employees.

Diversity & Inclusion

Amadeus aspires to be a leader in Diversity and Inclusion in the tech industry, enabling every employee to reach their full potential by fostering a culture of belonging and fair treatment, attracting the best talent from all backgrounds, and as a role model for an inclusive employee experience.  

Amadeus is an equal opportunity employer and committed to an accessible recruitment process. All qualified applicants will receive consideration for employment without regard to gender, race, ethnicity, sexual orientation, age, beliefs, disability or any other characteristics protected by law.

 

Be aware of recruitment scams

Amadeus Group never charges fees, requests payment, or asks for financial information during recruitment. All legitimate opportunities are communicated solely through official Amadeus channels, including our careers website. Any payment request or outreach via unofficial platforms (e.g., WhatsApp, Telegram) should be treated as fraudulent.