Information Security Audit Manager: Risk & Compliance Lead

Auxis; Bogotá; Presencial; COP 120.000.000 - 180.000.000; Jornada completa

Descripción de la vacante

The Audit Manager, Information Security at Grant Thornton will join the Information Security and Risk Management team to organize and manage internal and external audits, supporting the design and maintenance of a cohesive governance, risk and compliance program.

The role requires deep technical knowledge of security controls, frameworks, and regulations, and strong cross-functional collaboration to coordinate multiple timelines across the lines of defense.

Formación

• Experience with information security frameworks and standards
• Experience with regulatory requirements (GDPR etc.)
• Experience performing IT audits and control testing
• Experience using GRC tools in assessment/audit process
• Experience gathering information from various sources to identify security weaknesses
• Expert with security control design, development, implementation and monitoring
• Experience across multiple information security domains

Responsabilidades

• Develop audit program and plans, determine scope of audit coverage and organize internal and external audits
• Oversee audits and ensure compliance obligations are met
• Review audit reports, management responses and supporting workpapers
• Draft recommendations and action plans for management
• Collaborate with stakeholders across lines of defense on assessment results
• Identify and implement new compliance requirements/controls from regulation changes (ISO 27001, SOC 2, NIST, GDPR)
• Participate in policy reviews and provide input for policy operationalization
• Educate control owners to submit risks/exceptions and support risk assessments
• Design automated and manual control testing methods
• Conduct compliance assessments and internal control testing of critical processes and systems
• Promote culture of compliance and develop scalable risk/gov models
• Assimilate risk data into leadership-ready reports

Conocimientos

InfoSec frameworks

Regulatory requirements

IT audits

GRC tools

Security domains

Educación

Bachelor's degree in CS/Engineering or related field

Herramientas

GRC tools

Descripción del empleo

The Audit Manager, Information Security at Grant Thornton will join the Information Security and Risk Management team to organize and manage internal and external audits, supporting the design and maintenance of a cohesive governance, risk and compliance program.

The role requires deep technical knowledge of security controls, frameworks, and regulations, and strong cross-functional collaboration to coordinate multiple timelines across the lines of defense.