Senior Information Security Auditor

This is a fully remote position, open to applicants in Colombia, +2 more countries.

📋 Description

• Take full ownership of the complete delivery process for audit engagements, encompassing risk-based scoping, planning, execution, and reporting that aligns with BCD’s priorities.

• Oversee audits and assess control effectiveness in relation to security frameworks and regulatory requirements.

• Work collaboratively with compliance, cybersecurity, operational and technical management, business leaders, and various stakeholders.

• Formulate audit plans, conduct internal audits, prepare and present findings, and evaluate and endorse corrective action plans.

• Facilitate post-audit discussions with management to review scope and audit findings while offering recommendations and corrective actions.

• Coordinate with both internal and external auditors to manage IT security and compliance assessments.

• Assist in the preparation of performance measurement and reporting of functional metrics.

• Keep abreast of emerging regulations and trends impacting the risk landscape, adapting audit plans and procedures as necessary.

⛳️ Requirements

• A bachelor's degree in Cybersecurity, Information Technology, Computer Science, or a related field, or equivalent practical experience.

• Demonstrated experience in leading complex audit engagements.

• Proven expertise in audit evidence validation, control testing methodologies, and producing defensible audit documentation in accordance with external audit standards.

• Previous auditing experience with ISO Management Systems (ISO 27001), SOC2, or PCI.

• Significant experience as a security controls assessor or IT auditor with security frameworks such as NIST, ISO 27001, SOC 2, PCI DSS, GDPR, or CMMC.

• Strong comprehension of IT systems, software development, networking, architecture, and lifecycles.

• One or more current certifications from ISACA (e.g., CISM, CISA) or ISC2 (e.g., CISSP, SSCP, CCSP) or ISO 27001:2022 Lead Auditor.

• Ability to engage confidently with individuals at various organizational levels in a consultative capacity.

• Knowledge of data analytics and AI/ML concepts.

• Certification as an ISO 42001:2023 Lead Auditor is advantageous.

🏝️ Benefits

• Flexible working hours along with work-from-home or remote options.

• Opportunities for skillset enhancement and career advancement.

• Engage at the cutting edge of travel technology and contribute to the evolution of business travel.

• Generous vacation days.

• A compensation package that includes tools for mental, physical, and financial well-being.

• Travel industry professional perks and discounts.

• An inclusive work environment that celebrates diversity.

• Opportunity to work from anywhere for up to 60 days each year.