Senior Information Security Auditor Remote

Shape what's next with BCD

Senior Information Security Auditor (Remote)

Full time, Colombia, Costa Rica and Mexico

The Senior Information Security Auditor will support BCD’s information assurance and compliance program by leading audit engagements conducting assessments and audits to measure the effectiveness of our compliance and security systems. The auditor will ensure that BCD’s security and data privacy policies, operations, and systems comply with all relevant regulations, statues and client requirements. 

What You'll Do

• Own the end-to-end delivery of audit engagements, including risk-based scoping, planning, execution, and reporting aligned to BCD’s priorities
• Lead audit and validate control effectiveness against security frameworks (NIST, ISO 27001, SOC 2, CMMC, PCI DSS) and regulatory requirements (GDPR, CCPA/CCRA, etc.).
• Collaborate with compliance, cybersecurity, operational and technical management, business leaders and other stakeholders to gain credibility and ensure the success of the audit
• Develop audit plans, conduct internal audits, prepare and present findings, and review and approve corrective action plans
• Lead post-audit meetings with management to discuss scope and audit issues and present recommendations and corrective actions
• Liaise with internal and external auditors to manage IT security and compliance reviews
• Contribute to performance measurement preparation and reporting of functional metrics
• Stay abreast of new and emerging regulations & trends that impact the risk landscape and rapidly adjust audit plan or procedures accordingly

What You'll Bring

• Bachelor's degree in Cybersecurity, Information Technology, Computer Science, or related field, or equivalent practical experience
• Proven experience leading complex audit engagements
• Demonstrated experience with audit evidence validation, control testing methodologies, and defensible audit documentation aligned to external audit standards
• Prior Auditing experience of ISO Management Systems (ISO 27001), SOC2, or PCI
• Extensive experience as a security controls assessor or IT auditor of security frameworks such as NIST, ISO 27001, SOC 2, PCI DSS, GDPR, or CMMC
• Strong understanding of IT systems, software development, networking, architecture, and lifecycles
• One or more active certifications from ISACA (e.g., CISM, CISA) or ISC2 (e.g., CISSP, SSCP, CCSP) or ISO 27001:2022 Lead Auditor
• Confident working with individuals at various levels of an organization in a consultative manner
• Familiarity with data analytics and AI/ML concepts
• Certified ISO 42001:2023 Lead Auditor is a plus

Ready to shape what’s next? Apply now! 
 
We’re dedicated to building a diverse, inclusive and authentic workplace. If you’re excited about a role, but your experience doesn’t align perfectly, we still encourage you to apply. 
 
We are committed to providing reasonable and necessary accommodations to ensure all employees can perform their roles effectively. For accommodation requests or further information, contact our Talent Acquisition department at careers@bcdtravel.com. 

#LI-Remote

#LI-VP1