Director, Information Security
full-time•Bengaluru
About this role
Job Title
Key Responsibilities
- Lead cloud security risk management: identify, assess, and mitigate risks across Microsoft Azure, Amazon Web Services (AWS), and Google Cloud Platform (GCP); design, implement, and validate technical security controls; and oversee the full lifecycle of security policies (development, deployment, continuous monitoring).
- Partner with senior architects, Chief Information Security Officer (CISO) leadership, and cloud provider architects to ensure robust security architecture; present the organization’s security posture to stakeholders and provide actionable recommendations.
- Ensure and evidence compliance: conduct risk assessments, lead audits, and manage compliance with International Organization for Standardization (ISO) 27001, Payment Card Industry Data Security Standard (PCI DSS), System and Organization Controls (SOC) assurance reports, General Data Protection Regulation (GDPR), European Union Artificial Intelligence Act (EU AI Act), and Network and Information Security Directive 2 (NIS2).
- Drive Information Security Management System (ISMS) risk management, define key performance indicators (KPIs), oversee policy reviews and third‑party risk management, and coordinate cross‑functional responses to security and compliance requirements.
- Provide consultancy and mentorship on cybersecurity, privacy, and AI compliance initiatives; support team problem‑solving and continuous improvement; maintain and expand relevant cloud certifications.
Skills & Knowledge – Technical / Functional and Managerial
- Expertise in cloud security controls and architecture reviews, with the ability to independently assess cloud supplier services.
- Proficiency in cloud computing, infrastructure, and networking; systems architecture; virtualization; and containers (e.g., Docker).
- Knowledge of security and auditing standards, including ISO/IEC 27000 series, Payment Card Industry Data Security Standard (PCI DSS), and Statement on Standards for Attestation Engagements (SSAE) 18.
- Professional background in information technology (IT) with experience implementing and validating security controls in complex cloud environments.
- Strong collaboration and communication skills to work effectively across teams and with stakeholders on security and compliance needs.
Education and Years of Experience
- Bachelor’s or master’s degree in computer science or a related field, or equivalent practical experience.
Certifications: CISSP, CCSP, CISM
- Certified Information Systems Security Professional (CISSP), Certified Cloud Security Professional (CCSP), Certified Information Security Manager (CISM), or equivalent knowledge.
Bring at least two or three of the following certifications (or demonstrate equivalent knowledge)
- Azure Administrator (AZ‑104)
- Azure Security Engineer (AZ‑500)
- AWS Solutions Architect – Associate
- AWS Security – Specialty
- Google Cloud Platform (GCP) Associate Cloud Engineer
- GCP Cloud Security Engineer
Diversity & Inclusion
Amadeus aspires to be a leader in Diversity, Equity and Inclusion in the tech industry, enabling every employee to reach their full potential by fostering a culture of belonging and fair treatment, attracting the best talent from all backgrounds, and as a role model for an inclusive employee experience.
Amadeus is an equal opportunity employer. All qualified applicants will receive consideration for employment without regard to gender, race, ethnicity, sexual orientation, age, beliefs, disability or any other characteristics protected by law.
Other facts
Tech stack
Cloud Security,Risk Management,Compliance,Cybersecurity,Privacy,AI Compliance,Collaboration,Communication,Cloud Computing,Infrastructure,Networking,Virtualization,Containers,Security Standards,Auditing Standards,Information Technology,Security Controls
About Amadeus
We make the experience of travel better for everyone, everywhere by inspiring innovation, partnerships and responsibility to people, places and planet.
Our technology powers the travel and tourism industry.
We inspire more connected ways of thinking, centered around the traveler.
Our platform connects the travel and hospitality ecosystem. We are making travel a force for social and environmental good.
We are passionate about travel. With a unique perspective, at the heart of our industry, we are redesigning the travel of tomorrow.
Team size: 10,001+ employees
Website: http://amadeus.com
LinkedIn: Visit
Industry: IT Services and IT Consulting
What you'll do
- Lead cloud security risk management and ensure compliance with various security standards. Provide consultancy and mentorship on cybersecurity and privacy initiatives.
Ready to join Amadeus?
Take the next step in your career journey
Frequently Asked Questions
What does a Director, Information Security do at Amadeus?
As a Director, Information Security at Amadeus, you will: lead cloud security risk management and ensure compliance with various security standards. Provide consultancy and mentorship on cybersecurity and privacy initiatives..
Why join Amadeus as a Director, Information Security?
Amadeus is a leading IT Services and IT Consulting company.
Is the Director, Information Security position at Amadeus remote?
The Director, Information Security position at Amadeus is based in Bengaluru, India. Contact the company through Clera for specific work arrangement details.
How do I apply for the Director, Information Security position at Amadeus?
You can apply for the Director, Information Security position at Amadeus directly through Clera. Click the "Apply Now" button above to start your application. Clera's AI-powered platform will help match your profile with this opportunity and guide you through the application process. You can also learn more about Amadeus on their website.