> Markdown version of [/jobs/ext/1267575-business-security-analyst](https://www.wearedevelopers.com/jobs/ext/1267575-business-security-analyst). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md). --- # Business Security Analyst - **Company:** Booking.com - **Location:** Amsterdam, Netherlands - **Experience:** Experienced - **Contract:** Permanent contract - **Skills:** Cyber Security, Data Governance, Fraud Prevention and Detection, Identity and Access Management, PCI Data Security Standards, Software Engineering, Information Technology - **Published:** July 15, 2026 - **Apply:** https://nl.indeed.com/viewjob?jk=e14e39329a8e2337 ## About the Role * 3 to 5 years of experience in one or more of Cyber Security, Safety, and Fraud topics * Understanding of technology processes and practices (e.g., change management, Secure Software Development Lifecycle, Identity and Access Management, IR, Incident Management, Data Governance) * Experience in IT Risk Management * Excellent English communication skills * Experience in stakeholder management and ability to effectively engage and influence individual technical staff * Creative problem-solver able to communicate concepts to a limited audience and create clarity * Additional cybersecurity qualifications such as CISM, CISSP, CISA, CRISC, AIGP, or similar are an advantage * Organized, with attention to detail and execution skills * Experience in the analysis and assessment of security programs * Good understanding of security best practices and standards such as NIST Cybersecurity Framework, ISO27001, and PCI DSS * Experience participating in security, safety, and fraud incident response activities * Bachelor's degree in computer science or related field or equivalent experience ## Description An individual contributor role assigned to support a Business Information Security Officer (BISO) who is assigned to one or more Business Units (BU). The role is an embedded Security, Safety, & Fraud (SS&F) analyst responsible for supporting the BISO in driving the SS&F strategy within each BU; partnering with SS&F to support delivery of products/tools/services that are fit for purpose. Within the BU, the BSA works primarily with the Tech and Product teams with the aim to improve the security, safety, and fraud risk posture of the BU. The role supports BU's adoption of the SS&F capabilities and standards and the continuous improvement of the latter based on BU feedback and requirements. By identifying BU gaps and risks related to SS&F, the BSA supports the BISO in enabling the business to achieve their goals while addressing their most relevant risks., Reporting to a Risk & Compliance Manager the BSA is an embedded analyst enabling the BISO to define and oversee the business unit's security, safety, and fraud roadmap to enable the BU to meet their objectives in a secure and compliant manner. The BSA understands the security, safety, & fraud threat landscape and risk posture, and how those apply in their respective business units. More specifically, the BSA, + Assessing, identifying, reporting, and monitoring the SS&F risks within the BU by supporting the BISO in periodic and relevant insights to BU leadership that drive risk based decisions and prioritization of actions + Champions and promotes SS&F awareness in the BU + Support in building productive relationships with business stakeholders + Representing the BISO at meetings and act on behalf of as requested * + Support the BISO in delivering operational and tactical security improvements in line with the overarching security strategy while supporting the Business Information Security Officer (BISO) + Understanding and keeping up to date with BU specific SS&F related security regulations + BU and SS&F collaboration support + Feedback and BU requirements towards the SS&F capabilities and services for continuous improvement + Support and analysis of SS&F risk acceptances + Support and analysis of SS&F risk remediation and mitigation activities + Support and analysis during SS&F incidents management ## Related Videos - [Thinking Differently - How to Make Money from Cyber Attacks & Cheats](https://www.wearedevelopers.com/videos/745-thinking-differently-how-to-make-money-from-cyber-attacks-cheats) - [Data Governance in the Era of AI](https://www.wearedevelopers.com/videos/1622-data-governance-in-the-era-of-ai) - [Official Opening of WeAreDevelopers World Congress 2026](https://www.wearedevelopers.com/videos/100000-official-opening-of-wearedevelopers-world-congress-2026) - [Security Pitfalls for Software Engineers](https://www.wearedevelopers.com/videos/726-security-pitfalls-for-software-engineers) - [Forecasting Cyber Attacks with Glassdoor Reviews - Lianne Potter](https://www.wearedevelopers.com/videos/2143-forecasting-cyber-attacks-with-glassdoor-reviews-lianne-potter) - [Cyber Sleuth: Finding Hidden Connections in Cyber Data](https://www.wearedevelopers.com/videos/893-cyber-sleuth-finding-hidden-connections-in-cyber-data) ## Related Articles - [How to Find Tech Jobs in Amsterdam](https://www.wearedevelopers.com/magazine/279-how-to-find-tech-jobs-in-amsterdam) - [Software Developer Salary in The Netherlands [2023]](https://www.wearedevelopers.com/magazine/217-software-developer-salary-in-the-netherlands-2023) - [How to land a developer job in Amsterdam](https://www.wearedevelopers.com/magazine/36-how-to-land-a-developer-job-in-amsterdam) - [Best Companies in the Netherlands: Top 25 Companies in 2023 ](https://www.wearedevelopers.com/magazine/193-best-companies-in-the-netherlands-top-25-companies-in-2023) - [The 12 Best Jobs for Software Engineers](https://www.wearedevelopers.com/magazine/401-the-12-best-jobs-for-software-engineers) - [The Best Tech Hubs in Europe: 5 Best Cities For Software Engineers](https://www.wearedevelopers.com/magazine/246-the-best-tech-hubs-in-europe-5-best-cities-for-software-engineers)