Chief Information Security Officer (CISO) in Barcelona

We're seeking a strong internet economy leader to head up Cyber Security at Skyscanner.

Our vision is to be the most trusted and most used online travel brand in the world. Our customer charter highlights our commitment to the confidentiality and security of our user’s data and so we seek to hire a Head of Cyber Security to lead both operational and product security squads, currently with 6 security professionals, to focus on this goal.

This leader will promote and develop a security culture across our business, with products developed using current agile and DevOps approaches. A dynamic style is required to support and promote secure practices across the rapidly expanding business and the approach to security will need to be shaped to our continually evolving engineering practices.

The owner of this senior level position will need to demonstrate previous experience of leading and line managing a small to medium sized security department within the internet economy. A balanced approach will be required with the right level of ‘constructive disruption’ and an obsession for the detail.

Compliance and legal knowledge will also form part of this role to ensure we have the correct security approach on a global basis.

A candidate applying for this role would need to demonstrate a successful track record focused on the following aspects of operating in the internet economy:

• A clear understanding of the Cyber Security threat landscape and the ability to define a security strategy for Skyscanner.
• Strong communication and stakeholder management and the ability to work well with cross-functional and geographically dispersed teams.
• The ability to lead security managers and engineers to successfully deliver against our strategy.
• The domain expertise to earn the respect of the engineering community by demonstrating technical competency and knowledge of building a secure product.
• An engineering/technical qualification or the equivalent commercial experience.
• A current understanding of data protection laws (ideally globally).
• The rigor / principles expected of a security leader in a “world class engineering” organisation.
• Knowledge of the security services and tooling marketplace with vendor management experience.

Preferred expertise:

• Formally qualified with relevant certifications or equivalents, e.g. CISM, CISSP, CISA, QSA.
• Experience and knowledge of large scale, large volume technical solutions deployed to AWS.
• Experience with payment card compliance (PCI-DSS)

For more details on Engineering at Skyscanner you can check out our Engineering Blog - CodeVoyagers and follow Skyscanner Engineering on Twitter @CodeVoyagers