BCD Travel Services B.V. is a global travel management company operating in 170+ countries, employing more than 15,000 people. The threat surface is wide: the firm handles sensitive corporate travel data, payment systems, traveler personally identifiable information, and real-time booking infrastructure across a sprawling international footprint. Retaining 95%+ of its clients means the attack surface isn't just technical - it's reputational. A breach here exposes executive travel patterns, corporate account credentials, and payment rails used by major enterprises worldwide.
For a cybersecurity team, the challenge spans identity and access management across a workforce that interfaces with airlines, hotel chains, and global distribution systems in real time. The company's tech-forward positioning and open ecosystem approach suggest integration-heavy environments - API gateways, third-party data feeds, and partner portals all expand the perimeter. Defending a travel management platform means contending with credential stuffing against traveler accounts, fraud in booking workflows, and securing the data pipelines that feed duty-of-care and risk management tools.
BCD Travel was founded in 2006 and operates with a family-owned heritage and a stated focus on long-term thinking. The culture signals - people-first, genuine human expertise - point toward an organization that values retention and institutional knowledge on its security teams, not just tooling. The domain: corporate travel infrastructure at global scale, where the intersection of PII, payments, and real-time logistics creates a concrete, high-stakes operational security problem.
