Data Security Analyst II

The Data Security Analyst II role comprises both the day-to-day Data Security Ops (under Product Security) operational tasks as well as leading large scale data security incidents, which might tie to regulatory obligations (e.g. GDPR, PCI-DSS, AI Act, DMA, DSA etc.). Data Security Analyst II employees also are tasked with working on projects with scope outside of the team which contribute to the Product Security mission.

Key responsibilities:

• Identify, analyze, contain, respond and escalate system-generated signals and human-generated reports of data leakage and perform response actions where necessary in alignment with department policies, to ensure external regulatory obligations are met.
• Initiate incident response, assist incident managers and oversee analysts' deliverables during the Data Security incident response, according to the incident response and retrospective policy.
• Own and (potentially) lead quarterly/yearly objectives/projects, data research and large-scale topic analysis, in alignment with the Capability policy, to ensure compliance with Security department and external regulatory obligations.
• Transform data into insights, to identify and quantify improvement opportunities for Data Security processes, tooling, documentation and/or other areas that help to improve capability efficiency and reduce instances of data leakage
• Uses a combination of manual and automated tools to proactively analyze various data sets
• Demonstrate curiosity to understand how our tools and systems work, building deep expertise and sharing knowledge to elevate team performance. Translate discoveries into repeatable practices-automation, runbooks, and guardrails-that reduce dependencies, increase team autonomy, and deliver measurable improvements in operational excellence
• Contribute or lead other projects which reduce data leakage while maintaining focus on a positive customer and employee experience
• Develop and provide reporting to management that highlights trends in data leakage across teams, business units, and the associated risks
• Develops, initiates, maintains, and revises detections, automated strategies and approaches for Booking.com's Security and Cyber operations within the big picture of the organization
• Support the Data Security product teams in the development of new tools and detection techniques for use in data leakages detection/prevention
• Provides training and supports education by sharing outcomes of analysis of data leakage trends and patterns to relevant staff
• Contribute to Booking.com's growth through interviewing, onboarding, or other recruitment efforts

• Hands-on mentality
• Intermediate Excel/GSuite skills
• Intermediate SQL skills
• Ability to manipulate and format large data sets
• Understanding of concepts around privacy and risk management
• Excellent Stakeholders management
• Data Loss Monitoring/Prevention response and configuration experience (CASB, Mail, Endpoint, etc.)
• Experience responding to security incidents from start to finish

• Operations ownership

• Ability to prioritize incoming escalations and requests appropriately using established impact frameworks
• Great communication, questioning, and problem-solving skills

• Possibility to live and work in Amsterdam, named as the best city in the World for living a happy and healthy life
• International and diverse company culture;
• Possibility to innovate through multiple company programs (e.g. Hackathon, twice a year)
• Opportunity to work in an Agile, startup-like development environment
• Excellent support for personal development through online platforms
• Mentorship programs to accelerate skills growth
• Contribute to the company tech transformational journey toward a more modern tech stack
• Inclusive leadership, valuing the opinion of everyone independently of their career level
• Great compensation package
• Multiple perks that will make your life easier (e.g. discounts to local shops, discounted gym membership, etc.)