Manager - Information Security

BCD Travel; Bogotá; On-site; COP 120,000,000 - 300,000,000; Full time

Job summary

BCD Travel in Colombia seeks an experienced Information Security Manager to lead the information security strategy for the country, protecting information assets and managing cyber risk in alignment with global standards.

The role blends strategic leadership with hands-on expertise, acting as the security advisor to local leadership while supporting security operations, risk management, incident response, and regulatory compliance initiatives across the organization.

Qualifications

• Bachelor's degree in CS, IT, or related field.

Responsibilities

• Lead Colombia security strategy and governance.

Skills

Security Leadership

Risk Management

Regulatory Compliance

Stakeholder Mgmt

English Proficiency

Education

Bachelor's degree in Computer Science or IT

Master's degree (preferred)

Tools

SIEM

IAM

Cloud Security

ISO 27001 / NIST

Job description

We are seeking an experiencedInformation Security Manager to lead and execute the Information Security strategy for Colombia, ensuring the protection of information assets, effective cyber risk management, regulatory compliance, and alignment with global security standards.

This role combines strategic leadership with hands‑on cybersecurity expertise, serving as the primary security advisor for local leadership while actively supporting security operations, risk management, incident response, and compliance initiatives.

Key ResponsibilitiesSecurity Strategy & Governance

Job description:

We are seeking an experiencedInformation Security Manager to lead and execute the Information Security strategy for Colombia, ensuring the protection of information assets, effective cyber risk management, regulatory compliance, and alignment with global security standards.

This role combines strategic leadership with hands‑on cybersecurity expertise, serving as the primary security advisor for local leadership while actively supporting security operations, risk management, incident response, and compliance initiatives.

Key ResponsibilitiesSecurity Strategy & Governance

• Lead the local Information Security program aligned with regional and global objectives.
• Serve as the primary point of contact for cybersecurity matters within the country.
• Advise local leadership and executive stakeholders on security risks and mitigation strategies.
• Adapt global security initiatives to local business, operational, and regulatory requirements.

Risk Management & Compliance

• Identify, assess, and manage information security and cybersecurity risks.
• Maintain and monitor the local risk register and remediation plans.
• Support security reviews for new technologies, business initiatives, and third‑party services.
• Coordinate internal and external audits and ensure timely closure of findings and corrective actions.
• Ensure compliance with corporate policies, industry standards, and applicable regulations.

Incident Response & Security Operations

• Lead local coordination of information security incidents.
• Conduct initial incident investigations and collaborate with regional and global security teams.
• Monitor security alerts, vulnerabilities, and emerging threats.
• Support vulnerability management and remediation efforts.
• Facilitate incident response exercises and security testing activities.

Security Awareness & Third-Party Risk

• Develop and deliver security awareness and training programs.
• Promote a strong security culture across the organization.
• Assess and monitor security risks associated with vendors and business partners.
• Participate in security due diligence and third‑party risk assessments.

Required Qualifications

• Bachelor's degree in Computer Science, Systems Engineering, Cybersecurity, Information Technology, or a related field.
• 5+ years of experience in Information Security or Cybersecurity.
• 3+ years of experience leading security programs, initiatives, or teams.
• Experience in cyber risk management, compliance, audits, and security governance.
• Experience coordinating or supporting security incident investigations.
• Strong understanding of information security frameworks such as ISO 27001, NIST, CIS Controls, or COBIT.
• Advanced English proficiency (written and verbal).

Preferred Qualifications

• Master's degree in Information Security, Risk Management, Business Administration, or a related discipline.
• Professional certifications such as:
  • CISSP
  • CISM
  • CISA
  • CRISC
  • ISO 27001 Lead Auditor or Lead Implementer
  • Security+
  • Microsoft Security Certifications

Technical Knowledge

Experience in one or more of the following areas:

• Microsoft Entra ID / Active Directory
• Identity & Access Management (IAM)
• Multi‑Factor Authentication (MFA) and Conditional Access
• Security Information and Event Management (SIEM)
• Endpoint Detection & Response (EDR)
• Vulnerability Management
• Cloud Security
• Network Security
• Incident Response
• Third-Party Risk Management

What Success Looks Like

• • Strong ability to balance strategic planning with operational execution.
  • Excellent stakeholder management and executive communication skills.
  • Capability to translate technical risks into business decisions.
  • Proven experience working across global and multicultural environments.
  • Demonstrated leadership in driving security maturity and risk reduction initiatives.