Senior InfoSec Auditor (Remote) — Lead Compliance Audits

BCD Travel; Colombia; Remote; COP 291,300,000 - 388,400,000; Full time

Benefits offered by this job

Flexible hours

Work-from-home or remote opportunities

Career growth opportunities

Travel industry perks

Job summary

BCD Travel is seeking a Senior Information Security Auditor to lead end-to-end audits remotely across international sites. You will drive risk-based scoping, execute assessments, and report findings to improve information security and privacy program effectiveness.

You will validate controls against NIST, ISO 27001, SOC 2, GDPR, and PCI DSS while collaborating with cross-functional teams to ensure regulatory compliance. Strong certifications and stakeholder engagement are essential.

Qualifications

• Bachelor's degree in Cybersecurity/IT/CS or related field is required.
• Experience in audit evidence validation and control testing against external standards.
• Auditing experience with ISO 27001, SOC2, PCI DSS preferred.
• Extensive work as security controls assessor for NIST, ISO 27001, SOC 2, GDPR, PCI DSS.
• Strong IT systems understanding including development, networks, and lifecycle.
• Active certifications from ISACA or ISC2 (CISM, CISA, CISSP, etc.) or ISO 27001 Lead Auditor.
• Comfortable engaging with stakeholders at various levels; data analytics familiarity a plus.
• ISO 42001:2023 Lead Auditor is a plus.

Responsibilities

• Own end-to-end delivery of audit engagements including scope, planning, execution and reporting.
• Lead audits against security frameworks and regulatory requirements (GDPR, CCPA/CCRA, etc.).
• Collaborate with compliance, cybersecurity, operations, and business leaders to ensure audit success.
• Develop audit plans, perform internal audits, present findings and corrective actions.
• Lead post-audit meetings to discuss scope, issues and recommendations.
• Liaise with internal and external auditors to manage reviews.
• Contribute to performance metrics reporting and governance updates.
• Stay informed on evolving regulations and adjust audits accordingly.

Skills

Audit experience

Security frameworks

NIST knowledge

SOC 2 / PCI DSS

Data analytics awareness

Communication skills

ISACA/ISC2 certs

Education

Bachelor's degree in Cybersecurity / IT / CS or related field

Tools

Auditing tools

Job description

BCD Travel is seeking a Senior Information Security Auditor to lead end-to-end audits remotely across international sites. You will drive risk-based scoping, execute assessments, and report findings to improve information security and privacy program effectiveness.

You will validate controls against NIST, ISO 27001, SOC 2, GDPR, and PCI DSS while collaborating with cross-functional teams to ensure regulatory compliance. Strong certifications and stakeholder engagement are essential.