Job description

At Hays Travel we put people at the heart of everything we do, that extends to our customers and colleagues alike. As the UK’s largest independent travel agency, we welcome new ideas, foster innovative thinking and encourage career development.

Not only are we dream holiday makers, we are also passionate about living and breathing our SMILE values.

Supportive
Motivational
Innovative
Loyal
Excellent

What will be your key responsibilities?

Overall oversight of the technology estate, identifying vulnerabilities, risks and opportunities with viable solutions to mitigate.
Take ownership of the Cyber Security journey and work with stakeholders to agree roadmap and approach, execute on recommended changes alongside the team.
Support implementation of security tools, policies and procedures.
Collaborate with IT and development teams to ensure secure infrastructure and application design.
Day to day liaison and conduit between cyber security partner and Hays Travel, engaging in relevant discussion with concierge service.
Key stakeholder in the incident process in the event of a cyber security incident, to support, work with third parties in remediation.
Deliver regular reports and updates to senior leadership regarding Cyber Security landscape, current threats and emerging technology trends.
Advocacy of Cyber Security awareness, recommending colleague engagement and participating in Table Top exercises.
Execute agreed changes within our infrastructure relating to cyber security.

What competencies we are looking for?

Keen interest in Cyber Security and staying abreast of trends.
Strong communication skills, with the ability to explain technical concepts in non-technical terms.
Attention to detail, accuracy and analytical mindset.
Problem solving skills.
Effective time management and prioritisation.
Ability to work both autonomously and as part of a team.

What experience we are looking for?

Familiar with SIEM tools, firewalls and endpoint protection.
Understanding of threat vectors, malware and risk mitigation.
Experience with Cloud technologies.
Understanding of regulatory frameworks e.g. ISO27001, NIST.

Desirables but not Essential

Previous experience working as a Cyber Security Analyst or a similar role