Principal Business Information Security Specialist

Overview

Act as a key security advisor across programs, products, platforms, and technology teams to integrate security principles throughout design, development, and delivery, aligning security with business goals and supporting continuous improvement of Amadeus' Information Security Framework.

What you'll do

• Act as a security advisor for Open Platform and collaborate across product, architecture, and delivery teams.
• Conduct Security Architecture Reviews and assessments for cloud, applications, and technology platforms.
• Align Open Platform initiatives with enterprise security frameworks, strategies, and risk appetite.
• Translate corporate security policies into actionable local standards and architecture guidelines.
• Perform security and compliance assessments aligned with ISO 27001, PCI DSS, SOC 2, NIS2, GDPR, and emerging AI regulations.
• Provide practical security recommendations across Azure, AWS, and GCP using identity management, workload protection, and monitoring best practices.
• Support and promote Secure Software Development Lifecycles (SSDLC) and DevSecOps practices including automation and vulnerability management.
• Guide AI/ML solution assessments, helping identify and mitigate potential security and privacy risks.
• Contribute to developing reusable architecture patterns and secure-by-design practices.
• Collaborate on establishing metrics to demonstrate progress, risk reduction, and security effectiveness.

What you'll need

• Degree in Computer Science, Information Security, Engineering, or related field (or equivalent practical experience).
• Significant experience (around 10 years or equivalent) in cybersecurity, information security, or cloud security.
• Hands-on knowledge of security architecture, secure design, and risk assessments.
• Familiarity with ISO 27001/ISMS, PCI DSS, SOC 2, NIS2, GDPR, and AI security regulations.
• Experience with cloud environments (Azure, AWS, or GCP) and modern DevSecOps practices.
• Understanding of AI/ML, LLM, or emerging security challenges in automation and AI systems.
• Strong communication and collaboration skills across technical and non-technical teams.
• Interest in continuous learning, innovation, and building secure solutions that support global business needs.

Nice to have

• Certifications such as CISSP, CISM, or CCSP.

Details

• Hybrid working model.