Security, Risk & Compliance Analyst

Summary of Position

The purpose of this position is to perform and assist in enforcing information security processes to protect information against unauthorised modification or loss. This position is also responsible for assisting the Global Security, ICT and Data (SID) service on the creation and maintenance of security policies, standards, and practices.

Responsibilities and Duties

• Provide support for application penetration remediation on CTM- developed applications.
• Work with associated ICT teams to remedy identified vulnerability or recommend appropriate compensating controls.
• Assist the business in completing security-oriented Request for Proposal (RFP) questions.
• Assist with the creation, update and review of IT security policies, standards, procedures, along with required changes and documented exceptions for the organization.
• Perform security reviews and assist with management of file monitoring/UBA solutions.
• Perform security reviews and assist with management of file encryption solutions.
• Perform security reviews and assist with management of simulated phishing attack/training solutions.
• Provide recommendations for improvements using established best security practices.
• Supporting the Head of Security (EMEA and NA) with security-related responses for internal and external audit queries, including certifying bodies for ISO9001, ISO27001 and PCI DSS.
• Assist with the annual security awareness training program.

Management and Leadership Responsibilities

• This position may have direct and/or indirect reports which includes responsibility for overall performance management, including hiring, training, coaching, feedback, development, etc.
• Models the way for employees and sets a positive example by demonstrating our core values.
• Provides ongoing feedback and supports team member growth by working with employees and encouraging growth plans.
• Drives employee engagement. Facilitates regular and ongoing conversations about employee engagement and takes action to improve team and organizational culture.

Why CTM?

Reward & Recognition

CTM’s annual reward and recognition programme, CTM All Star Awards, takes our peer voted ‘All Stars’ on an incentive trip to destinations all around the world. Previous trips have included: Los Angeles, Hong Kong, Paris, Abu Dhabi, Queenstown, and Dallas.

As part of a strong and stable company, CTM will support you in your career development plans with a very strong history of promoting from within. CTM’s High-Performance (HiPo) programme has excelled the professional development of many CTM Leaders.

Employee Wellbeing and Flexibility

The physical health and mental wellbeing of our CTM employees is something we take very seriously. To promote these amongst our teams, CTM provides each employee with access to a well know wellbeing platform, free independent advice across a range of topics, ability to increase annual leave and more.

Sustainability Focus

CTM is committed to a range of initiatives that enable a socially responsible, long-term and sustainable mindset within CTM. Underpinned by our four Sustainability Pillars; Principles of Governance, People, Planet, and Prosperity, CTM’s Sustainability Strategy identifies material issues and outlines initiatives to achieve this. Some initiatives include:

• Annual Volunteer Day Leave to support a charity/cause of your choice
• Offsetting all CTM employees’ travel
• Partnership with South Pole – supporting sustainable community projects (local & global)
• Paperless office initiatives & recycling options

If you’re considering a career in travel, or a return to the travel industry, CTM is your number one choice. Your career in corporate travel is ready for take-off. Get on board today.

CTM is a Disability Confident Employer. Do not hesitate to connect with our Recruitment team if you need to discuss arrangements.

CTM is the Data Controller with respect to the personal information you provide during your application. We will use this information solely to process your application, and our legal basis is that you are considering taking up an employment contract with us. We may share this information with our parent company in Australia, but otherwise we will not disclose it to any other organisation. If you take up employment with us, we will keep the information for the duration of your employment, otherwise we will destroy it 2 months after the post is filled.

All the information that we ask for in application forms has to be completed for your application to go ahead. There is no profiling or automated decision making applied to the personal information you supply. You have all the legal rights with your personal data as laid out in the General Data Processing Regulation (GDPR) and the Data Protection Act 2018, including the right to complain to the Information Commissioner’s Office. Our Data Protection Officer may be contacted at [email protected].