Security & Compliance Manager

Work to turn vacation dreams into life-long memories by becoming a part of the Apple Leisure Group (ALG) team We strive to be the first choice in vacation travel, enriching lives and uniting the world.

Grow your career as a Secutity & Compliance Manager with Amstar DMC in Apple Leisure Group. In this role, you will develop and implement an effective compliance program ensuring that our operations and business transactions follow all relevant legal and internal rules including but not limited to: Annual PCI certification and compliance, SOX Compliance, GDPR (CCPA, LFPDPPP if applicable) / Privacy laws, HIPAA, local laws applicable for each legal entity.

**Responsabilities**
- Coordinate the certification work for PCI including all compliance work and documents needed.
- Conduct compliance risk assessments and regular audits to identify potential weaknesses and non-compliance situations.
- Develop and implement an effective legal compliance program
- Determine compliance metrics and establish a system for tracking them. Set plans to manage a crisis or compliance violation.
- Monitor all operational processes and procedures using a compliance management system to ensure that the company complies with all legal regulations, internal rules and ethical standards
- Assist other areas in the generation of Policies and Procedures on compliance issues including support in the generation of flow charts and processes
- Manage information flow by researching, recording, and analyzing data and information
- Train and educate colleagues to make sure everyone is aware of what they need to do to comply with internal and external laws and regulations.
- Keep staff updated so that they are informed of any legal changes and updates to compliance guidelines
- Act as an internal consultant to all areas of the company for compliance matters. Similarly, act as a contact person and liaison between department heads and senior management

**Requirements**:

- Bachelor’s degree or higher in Information Technology or similar area is required / Master’s Degree in IT or Cybersecurity desirable.
- Proven experience as a Compliances Officer or Compliance Manager.
- 5 years’ experience in positions regarding or related to PCI, SOX, Privacy Laws in general, risk management.
- Skills:

- Office 365 Suite
- Office 365 Digital Collaboration Tools
- Experience with ERPs
- Experience with corporate systems and networks
- Knowledge of legal requirements and controls
- Familiarity with industry practices and professional standards

**About Apple Leisure Group**
As North America’s only vertically integrated travel, hospitality and leisure management group, Apple Leisure Group is an industry innovator that combines the expertise of 14 leading brands. Our unique niche allows us the special opportunity to oversee every aspect of the travel experience, from the moment a guest books a trip to the time they return home. ALG consistently delivers exceptional value to travelers and strong performance to resort owners and partners by strategically leveraging the power of its portfolio of brands across five segments, comprising:

- **Vacations**: The largest seller of vacation packages and charter flights in the U.S. for travel to Mexico and the Caribbean, moving approximately 3.2 million passengers annually through well-established vacation brands
- **Resort Brand Management**: management of 5-star and 4-star luxury resorts through AMResorts® award-winning brand portfolio
- **Destination Management Services**: Best-in-class destination management services provided by Amstar® DMC and Worldstar®
- **Loyalty Program**: Exclusive loyalty program Unlimited Vacation Club®
- **Technology Solutions**: Innovative technology solutions provider Trisept Solutions®, connecting over 88,000 travel agents with leading travel suppliers.

**Our Values**
At ALG, we call our employees Colleagues, because we are more than just employees. We are united as a team, working toward a common mission and vision. Together, we are committed to live the core values by which we operate:
**Empathy - Integrity - Respect - Inclusion - Experimentation - Wellbeing