Senior IT Audit Manager: Security Controls & Compliance

Oceans Code Experts; Colombia; Presencial; COP 120.000.000 - 180.000.000; Jornada completa

Descripción de la vacante

Oceans Code Experts is seeking an AX-25 Audit Manager to lead IT audits, assess security controls, and ensure compliance with regulatory standards. The role focuses on designing, implementing, and monitoring robust security controls across multiple information security domains.

The ideal candidate will have 5-7 years of relevant experience, advanced English proficiency, and strong expertise in security frameworks such as NIST 800-53 and ISO 27001, along with GDPR familiarity.

Formación

• Bachelor's degree in Computer Science, Engineering, or related field or equivalent work experience.
• CISA, CRISC, CISM, or CISSP certifications (one or more) preferred.
• Advanced verbal and written communication skills.
• Experience with information security frameworks and industry standards (e.g., NIST 800-53, ISO 27001).
• Familiarity with regulatory requirements such as GDPR.
• Experience using GRC tools for assessments and audits.
• Expertise in security control design, development, and implementation.

Responsabilidades

• Perform IT audits and control testing to assess security measures.
• Utilize GRC tools and technologies to support the assessment/audit process.
• Identify weaknesses in security controls by gathering information from various sources.
• Design, develop, implement, and monitor security controls.
• Demonstrate expertise across multiple information security domains.

Conocimientos

Advanced English

Information security knowledge

Educación

Bachelor's degree in CS/Engineering or related field

CISA, CRISC, CISM, CISSP certifications

Herramientas

GRC tools

Descripción del empleo

Oceans Code Experts is seeking an AX-25 Audit Manager to lead IT audits, assess security controls, and ensure compliance with regulatory standards. The role focuses on designing, implementing, and monitoring robust security controls across multiple information security domains.

The ideal candidate will have 5-7 years of relevant experience, advanced English proficiency, and strong expertise in security frameworks such as NIST 800-53 and ISO 27001, along with GDPR familiarity.