Remote Internal Audit & Compliance Leader

Otonomee Customer Management Limited; Colombia; Remote; COP 207,874,000 - 287,825,000; Full time

Benefits offered by this job

Fully work from home

Equipment provided

Home office allowance

Online wellbeing resources

Professional growth

Team events

Job summary

Otonomee Customer Management Limited is seeking an experienced Internal Audit & Compliance Manager to own governance, risk and compliance programmes. This role will be central to maintaining a strong, scalable control environment as the business grows its technology, data and AI capabilities.

The successful candidate will manage ISO/IEC 27001 ISMS, maintain audit readiness across PCI DSS and SOC 2, and support additional frameworks on the roadmap.

Qualifications

• 8+ years in internal audit, GRC, or information-security compliance.
• Hands-on experience implementing ISO/IEC 27001 ISMS.
• Experience with SOC 2 and Trust Services Criteria.
• PCI DSS compliance experience and audit follow-up.
• Ability to lead a cross-framework compliance programme.

Responsibilities

• Establish and run internal audit across ISO 27001, PCI DSS, SOC 2 and additional frameworks.
• Provide independent assurance to CTO, CEO and leadership.
• Maintain audit readiness and coordinate external audits end-to-end.
• Develop KRIs and mitigation plans; track remediation to closure.
• Lead security questionnaires and client assurance activities.
• Own ISMS operations and Drata GRC platform management.

Skills

Internal audit

GRC

ISO 27001

SOC 2

PCI DSS

Risk-based methodologies

Vendor risk

Leadership communication

Education

Internal-auditor qualification

Tools

Drata

Job description

Otonomee Customer Management Limited is seeking an experienced Internal Audit & Compliance Manager to own governance, risk and compliance programmes. This role will be central to maintaining a strong, scalable control environment as the business grows its technology, data and AI capabilities.

The successful candidate will manage ISO/IEC 27001 ISMS, maintain audit readiness across PCI DSS and SOC 2, and support additional frameworks on the roadmap.