Senior InfoSec Risk Lead — Remote

BCD Travel; Colombia; Teletrabalho; COP 90 000 000 - 150 000 000; Tempo integral

Vantagens oferecidas por esta oferta de emprego

Flexible working hours

Remote opportunities

Professional development

Resumo da oferta

The Senior Risk Analyst at BCD Travel joins the Information Security Risk Management Team to identify, assess, document, and monitor information security risks across services, apps, technology environments, projects, and third‑party suppliers.

You will apply structured risk methodologies to evaluate inherent and residual risk, identify control gaps, and support risk decisions with clear, well‑documented analyses and remediation actions.

Qualificações

• Bachelor’s degree or equivalent experience in a related field.
• Experience conducting information security risk assessments using structured methodologies.
• Familiarity with risk management frameworks and governance controls.

Responsabilidades

• Lead information security risk assessments across applications, infrastructure, cloud services, and third-party suppliers.
• Determine inherent and residual risk using approved criteria and evidence.
• Identify control gaps and evaluate control design, implementation, and effectiveness.
• Map risks to policies, procedures, and regulatory requirements.
• Prepare risk summaries and dashboards for management.

Conhecimentos

Risk assessments

Information security risk management

Governance

Stakeholder influence

Analytical skills

Formação académica

Bachelor’s degree in Information Security, Cybersecurity, Computer Science, Information Systems, Risk Management, Business, or related field

Ferramentas

ISO/IEC 27001

NIST CSF

ISO/IEC 27002

Descrição da oferta de emprego

The Senior Risk Analyst at BCD Travel joins the Information Security Risk Management Team to identify, assess, document, and monitor information security risks across services, apps, technology environments, projects, and third‑party suppliers.

You will apply structured risk methodologies to evaluate inherent and residual risk, identify control gaps, and support risk decisions with clear, well‑documented analyses and remediation actions.