Audit Manager

Oceans Code Experts; Colombia; Hybrid; COP 90,000,000 - 130,000,000; Full time

Job summary

Oceans Code Experts seeks an AX-25 Audit Manager to join our team in a hybrid Colombia role. The candidate will work with information security frameworks, regulatory requirements, and IT audits, leveraging strong English skills and leadership in security control design.

The role requires +5 years of experience and hands-on expertise in security control design and implementation across multiple information security domains, with a flexible, full-time, hybrid arrangement.

Qualifications

• Bachelor's degree or equivalent in CS/Engineering.
• CISA/CRISC/CISM/CISSP certifications preferred.
• Advanced English proficiency in speaking and writing.
• Experience with information security frameworks (NIST 800-53, ISO 27001).

Responsibilities

• Perform IT audits and control testing to assess security measures.
• Utilize GRC tools to support assessment/audit processes.
• Identify weaknesses in security controls from various sources.
• Design, develop, implement, and monitor security controls.
• Demonstrate expertise across multiple information security domains.

Skills

Security controls

GRC tools

IT audits

Information security frameworks

Advanced English

Education

Bachelor's degree or equivalent in CS/Engineering

Tools

GRC tools

Job description

AX-25 Audit Manager

hybrid CO senior full time

Job Description

Job Summary

Oceans Code Experts is looking for an AX-25 Audit Manager to join our team. This role involves working with information security frameworks, regulatory requirements, and performing IT audits. We are seeking a candidate with +5 years of experience, advanced English proficiency, and expertise in security control design and implementation.

Job Requirements

Job Responsibilities

• Perform IT audits and control testing to assess security measures.
• Utilize GRC tools and technologies to support the assessment/audit process.
• Identify weaknesses in security controls by gathering information from various sources.
• Design, develop, implement, and monitor security controls.
• Demonstrate expertise across multiple information security domains.

Job Requirements

• Bachelor's degree in Computer Science, Engineering, or related field, or equivalent work experience.
• CISA, CRISC, CISM, or CISSP certifications (one or more) preferred.
• Demonstrated advanced verbal and written communication skills.
• Experience with information security frameworks and industry standards (e.g., NIST 800-53, ISO 27001).
• Familiarity with regulatory requirements such as GDPR.
• Experience using GRC tools for assessments and audits.
• Expertise in security control design, development, and implementation.
• 5-7 years of relevant experience.
• Advanced English proficiency, written and spoken.

Nice to Have

• Experience across multiple information security domains.
• Experience with COSO, HITRUST, and ISO 27017.

Position Type and Expected Hours of Work

• Full-time consulting position.
• Up to 40 hours per week.
• Flexible core hours.
• Hybrid.