Compliance Program Lead

Job Title

Compliance Program Lead

Summary of the role:

The Compliance Program Lead is responsible for supervising and executing activities related to Navitaire's compliance objectives, including periodic audits to PCI-DSS, SSAE-18 (SOC), and internal standards.  This position includes responsibility for program management and execution, including project plans and timelines, scoping and requirements. They proactively monitor, manage and report on execution of deliverables through all program phases. 

This is a critical role which integrates compliance knowledge and project/program management skills as part of Navitaire's cybersecurity domain.  Security risk management is at the heart of the responsibilities, including the ability to identify individual and systemic gaps in compliance, and effectively collaborating with peers in the Cybersecurity team to provide remediation and mitigation guidance to the organization.  The Compliance Program Lead works cross-functionally and at all levels to ensure that compliance strategy is being implemented effectively and in a timely manner. They will coordinate proactively with teams and stakeholders to ensure compliance objectives are met from day one and to deliver the peace of mind our customers depend on. 

The Compliance Program Lead will assist cybersecurity leadership to ensure information security policies and standards are rolled out consistently throughout the business.  They will have the opportunity to lead by example and assist as needed with Navitaire Cybersecurity projects.  As a security professional they will work to provide and improve cybersecurity and assurance to the Navitaire business.

In this role you’ll:

• Ensure that audits are delivered on-time, within scope and within budget

• Assist in the definition of audit project scope and objectives, involving all relevant stakeholders and ensuring technical feasibility

• Develop a detailed project plan to monitor and track audit progress.  Report periodically to internal stakeholders, escalating when delays, blockers, or other issues are identified.

• Create and maintain detailed documentation for treatment of audit findings, including identified gaps and necessary steps for remediation and/or mitigation.

• Collaborate with internal and external stakeholders, driving remediation and mitigation actions to completion.  Report periodically to leadership on the status of these efforts.

• Measure performance of resources/teams responsible for the above efforts, using appropriate tools and techniques, and report and escalate to management as needed

• Successfully manage relationships with external auditors, internal stakeholders, and third parties.  Manage incoming compliance issue requests to Navitaire CyberSecurity to ensure timely response.

About the ideal candidate: 

• Bachelor's degree in a business or technical discipline or equivalent experience

• ISA, QSA, CISA, or CISSP Certification

• Additional Security Certifications a plus

• Minimum of 4 years audit/compliance experience working with internal and external stakeholders

• Minimum of 3 years of MS Office Suite experience

• 2+ years information security or related experience preferred

• 2+ years risk management experience preferred

• DevOps and/or DevSecOps experience preferred

• Experience with public cloud computing models preferred.

• Demonstrated understanding of security standards and audit frameworks. (e.g. PCI-DSS, SSAE-18, NIST, ISO27001)

• Ability to apply the above standards within the business model of software development and SaaS delivery

• Demonstrated comfort in working with and leading both technical and non-technical personnel

• Proven ability to work proactively and drive issues and deliverables to resolution

• Excellent written and verbal communication skills, including group leadership and executive presentations.

Working at Amadeus, you will find

🎯 A critical mission and purpose - At Amadeus, you will be powering the future of travel and pursuing a critical mission and extraordinary purpose.

🌎 A truly global DNA - Everything at Amadeus is global, from our people to our business, which translates into our footprint, processes, and culture.

🎓 Great opportunities to learn - Learning happens all the time and in many ways at Amadeus, through on-the-job training, formal learning activities, and day-to-day interactions with colleagues.

🤗 A caring environment - Amadeus fosters a caring environment, nurturing both a fulfilling career and personal and family life. We care about our employees and strive to provide a supportive work environment