Information Security Manager

Job Description

Join our global Information Security team as an Information Security Manager, where you'll play a crucial role in protecting TUI's IT organisation and promoting a security-first culture across multiple Technology Domains.

The role will be published until 8th May 2026.

ABOUT OUR OFFER

• Personal benefits: Attractive remuneration, discretionary bonus schemes, generous travel benefits, extensive health & well-being support, and more.

• Flexible working: Work is something you do, not somewhere you go. We encourage a healthy work-life balance with a dynamic working environment.

• A career to shape: Access the TUI Learning Hub to level-up and reach your ambitions.

• Broaden your network: We champion intercultural collaboration and provide opportunities to work on global projects and teams.

• Community: Get involved with incredible local charity and sustainability initiatives like the TUI Care Foundation.

ABOUT THE JOB

• You'll promote a security-first culture within your Domains, contributing to the creation and maintenance of an information security programme that addresses evolving business risks.

• Driving adoption of security policies, standards, and controls is key, as you'll provide expert advice and guidance to stakeholders across the organisation.

• You'll help protect our most critical assets by ensuring appropriate assurance and rigorous testing is in place, whilst tracking lessons learned from security incidents.

• Managing risk in a pragmatic and cost-effective manner is essential, as you'll ensure security controls like vulnerability scanning and patching remain effective.

• You'll protect the integrity, availability, and confidentiality of information and data, whilst reporting on the overall effectiveness of the security programme against defined KPIs.

• Building strong working relationships across business and IT teams is crucial, as you'll influence others to do the right thing and drive continuous improvement.

ABOUT YOU

• You bring proven experience of leading an information security capability and governance, risk and compliance activities for a large business unit.

• Strong communication and influencing skills are essential, with the ability to adapt to different businesses and stakeholders, and gain commitment at business unit board level.

• You have a strong understanding of Microsoft security best practices related to cloud and on-premises technology, with experience securing technologies such as Azure, MS365 and Copilot.

• Understanding of security practices in Amazon Web Services and international regulatory contexts, particularly data privacy, will set you up for success.

• You're adept at assessing maturity and delivering improvements, with CISSP/CISM/CISA certification preferred, plus good knowledge of standards like ISO27001, NIST CSF, and PCI.

• Excellent planning, organisation, and interpersonal skills enable you to work effectively with technical and non-technical colleagues around the world, whilst maintaining focus on agreed objectives.

From a workplace to a place to belong. At TUI we embrace diversity, equity, and inclusion, encouraging everyone to come as you are, because together, our potential is limitless.

We are committed to supporting candidates with disabilities and impairments so if you require any support, please do let us know.

#LI-FD2