Information Security Risk and Compliance Adviser, Asia

FCM is one of the world’s largest travel management companies and a trusted partner for nationals and multinational companies. With a 24/7 reach in 97 countries, FCM’s flexible technology anticipates and solves client needs, supported by experts who provide in-depth local knowledge and duty of care as part of the ultimate personalised business travel experience. As part of the ASX-listed Flight Centre Travel Group, FCM delivers the best market-wide rates, unique added-value benefits, and exclusive solutions. A leader in the travel tech space, FCM has proprietary client solutions. FCM provides specialist services via FCM Consulting and FCM Meetings & Events.

About The Opportunity 

FCM Asia is an Equal Opportunity Employer searching for talented, driven people who have a desire to build a rewarding career in a company that loves to celebrate your success! We work in a team work environment where we maintain a favourable working relationship with co-workers in all departments to foster a culture of trust and mutual respect.

By joining the team, you'll discover first hand why we're recognised around the world as an outstanding employer.  In addition, our company founder strongly believes the success of our business relies on the success of our people.

Key duties & responsibilities:

Security Risk Management

• Assist the Information Security Risk and Compliance Manager, CPO Asia, Risk and Business Leadership to identify information security risk exposures and manage them within risk appetite
• Implement and maintain an information security risk register to record, track and manage information security risk for the region
• Monitor new threats as they evolve and recommend adjustments to risk management plans and security controls as necessary

Security Compliance Management

• Lead the implementation and maintenance of the Information Security Management System (ISO 27001) within Asia
• Facilitate and provide secretarial support (agenda, meeting pack, and minutes) for the quarterly Information Security Management Forums (ISMF)
• Collaborate with internal stakeholders to collate assurance documentation and evidence to support audit activity
• Perform internal and coordinate external audit and security testing programs to maintain compliance with Corporate security standards, certifications and regulatory requirements

Client Information Security Support

• Assist with the assessment of third-party security risk for suppliers with whom FCTG has a requirement to share information or business processes
• Assist Sales and Account Management teams to respond to customer security questions
• Feed customer requirements into ongoing assurance activities to ensure new compliance risks are known, owned, and managed

Job Requirements & Competencies: 

Behavioural Competencies

• Ability to influence without necessarily having direct control
• Actively listens and fosters open communication
• Builds trust and sustains collaborative, productive relationships
• Presents technically complex ideas & concepts logically and clearly
• Excellent written and spoken communication in English
• Plans and prioritises own work as well as guides others to ensure all goals are met
• Ability to work independently and use own initiative

Job Competencies

• Plans projects and activities well in advance and takes account of changed circumstances
• Monitors performance against deadlines and milestones
• Breaks information into component parts, patterns and relationships
• Probes for further information or greater understanding of a problem
• Makes rational judgments from the available information and analysis

Experience

• 3+ years of experience in information security, governance, risk and compliance (GRC), or a technical security operations role
• In-depth knowledge of Security frameworks such as ISO27001/2, PCI DSS, NIST, SOC 2, etc
• Working knowledge of Risk Frameworks such as ISO 31000
• Demonstrated ability in implementing and maintaining an Information Security Management System (ISMS) for ISO 27001

Desirable Qualifications

• ISO 27001 Internal Auditor or Lead Implementor
• CISSP, CISM, or equivalent certification desirable but not mandatory

Work Perks! - What’s in it for you: 

FCTG is renowned internationally for having amazing perks and an even better culture.  We understand that our people are our most valuable asset. It is the passion and dedication of our teams that keep the company on top of the industry ladder. It’s also why we offer some great employee benefits and perks outside of the norm. 

You will be rewarded with competitive market salary. You will also be equipped with relevant training courses and tools to set you up for success with endless career advancement and job opportunities all over the world.

• Generous remuneration structure and a highly competitive salary 

• Fun and Energetic culture: At the heart of everything we do at FCM is a desire to have fun and be yourself 

• Work life Balance: We believe in “No Leave = No Life” So have your own travel adventures with paid annual leave 

• Travel perks: You'll have access to plenty of industry discounts to ensure you continue to broaden your horizons 

• A career, not a job: We believe in our people brightness of future. As a high growth company, you will have the opportunity to advance your career in any direction you choose whether that is locally or globally 

• Enjoy the freedom and flexibility with our Flexible Working Arrangement 

• Reward & Recognition: Celebrate the success of yourself and others at our regular Buzz Nights and at the annual Global Gathering - You'll have to experience it to believe it! 

• Love for travel: We were founded by people who wanted to travel and want others to do the same. That passion is something you can’t miss in our people or service. 

We’d love to hear from you if you have...

#LI-RL1#FCM#LI-Onsite

Are you ready to elevate your career in travel management? Apply with FCM today!