Senior Information Security Auditor Remote

BCD Travel; United States; Remote; USD 110,000 - 160,000; Full time

Benefits offered by this job

Flexible working hours

Work From Anywhere 60 days per year

Generous vacation days

Wellbeing tools

Travel industry perks and discounts

Job summary

BCD Travel seeks a Senior Information Security Auditor to lead end-to-end audit engagements from scoping to reporting, ensuring compliance with NIST, ISO 27001, SOC 2, PCI DSS, GDPR and other regulations. This remote role supports teams across Colombia, Costa Rica and Mexico.

You’ll collaborate with stakeholders, validate controls, present findings, and guide corrective actions. The ideal candidate holds ISACA/ISC2 certifications (CISA/CISM or CISSP), and has deep IT security knowledge and audit

Qualifications

• Bachelor's degree in Cybersecurity, Information Technology, Computer Science, or related field, or equivalent practical experience.
• Proven experience leading complex audit engagements.
• Demonstrated experience with audit evidence validation, control testing methodologies, and defensible audit documentation aligned to external audit standards.
• Prior Auditing experience of ISO Management Systems (ISO 27001), SOC2, or PCI.
• Extensive experience as a security controls assessor or IT auditor of security frameworks such as NIST, ISO 27001, SOC 2, PCI DSS, GDPR, or CMMC.
• Strong understanding of IT systems, software development, networking, architecture, and lifecycles.
• One or more active certifications from ISACA (e.g., CISM, CISA) or ISC2 (e.g., CISSP, SSCP, CCSP) or ISO 27001:2022 Lead Auditor.
• Confident working with individuals at various levels of an organization in a consultative manner.
• Familiarity with data analytics and AI/ML concepts.
• Certified ISO 42001:2023 Lead Auditor is a plus.

Responsibilities

• Own the end-to-end delivery of audit engagements, including risk-based scoping, planning, execution, and reporting aligned to BCD’s priorities
• Lead audit and validate control effectiveness against security frameworks (NIST, ISO 27001, SOC 2, CMMC, PCI DSS) and regulatory requirements (GDPR, CCPA/CCRA, etc.)
• Collaborate with compliance, cybersecurity, operational and technical management, business leaders and other stakeholders to gain credibility and ensure the success of the audit
• Develop audit plans, conduct internal audits, prepare and present findings, and review and approve corrective action plans
• Lead post-audit meetings with management to discuss scope and audit issues and present recommendations and corrective actions
• Liaise with internal and external auditors to manage IT security and compliance reviews
• Contribute to performance measurement preparation and reporting of functional metrics
• Stay abreast of new and emerging regulations & trends that impact the risk landscape and rapidly adjust audit plan or procedures accordingly

Skills

Audit leadership

NIST

ISO 27001

SOC 2

PCI DSS

GDPR/CCPA

CISA/CISM

CISSP/CCSP

Data analytics concepts

Education

Bachelor's degree in Cybersecurity/IT/CS

Tools

ISO 27001 Lead Auditor

Audit evidence validation

Job description

Shape what's next with BCD

Senior Information Security Auditor (Remote)

Full time, Colombia, Costa Rica and Mexico

The Senior Information Security Auditor will support BCD’s information assurance and compliance program by leading audit engagements conducting assessments and audits to measure the effectiveness of our compliance and security systems. The auditor will ensure that BCD’s security and data privacy policies, operations, and systems comply with all relevant regulations, statues and client requirements.

What You’ll Do

• Own the end-to-end delivery of audit engagements, including risk-based scoping, planning, execution, and reporting aligned to BCD’s priorities
• Lead audit and validate control effectiveness against security frameworks (NIST, ISO 27001, SOC 2, CMMC, PCI DSS) and regulatory requirements (GDPR, CCPA/CCRA, etc.)
• Collaborate with compliance, cybersecurity, operational and technical management, business leaders and other stakeholders to gain credibility and ensure the success of the audit
• Develop audit plans, conduct internal audits, prepare and present findings, and review and approve corrective action plans
• Lead post-audit meetings with management to discuss scope and audit issues and present recommendations and corrective actions
• Liaise with internal and external auditors to manage IT security and compliance reviews
• Contribute to performance measurement preparation and reporting of functional metrics
• Stay abreast of new and emerging regulations & trends that impact the risk landscape and rapidly adjust audit plan or procedures accordingly

What You’ll Bring

• Bachelor's degree in Cybersecurity, Information Technology, Computer Science, or related field, or equivalent practical experience
• Proven experience leading complex audit engagements
• Demonstrated experience with audit evidence validation, control testing methodologies, and defensible audit documentation aligned to external audit standards
• Prior Auditing experience of ISO Management Systems (ISO 27001), SOC2, or PCI
• Extensive experience as a security controls assessor or IT auditor of security frameworks such as NIST, ISO 27001, SOC 2, PCI DSS, GDPR, or CMMC
• Strong understanding of IT systems, software development, networking, architecture, and lifecycles
• One or more active certifications from ISACA (e.g., CISM, CISA) or ISC2 (e.g., CISSP, SSCP, CCSP) or ISO 27001:2022 Lead Auditor
• Confident working with individuals at various levels of an organization in a consultative manner
• Familiarity with data analytics and AI/ML concepts
• Certified ISO 42001:2023 Lead Auditor is a plus

Why you’ll love working here

Join a global industry leader where curiosity drives innovation, growth is continuous, and every voice matters. At BCD, you'll have the freedom to make an impact, the support to develop your potential, and the opportunity to help shape the future of travel.

Meet BCD

BCD Travel creates connections that move people and ideas forward. Through open technology and trusted human expertise, we help companies and people navigate change, simplify complexity and make confident decisions about how and when they travel. Our intuitive digital experiences for every stakeholder power journeys that fuel success and drive progress. With 15,000+ dedicated team members serving clients in 170+ countries, BCD is shaping a more sustainable future for business travel. Industry-leading meetings and events management and a global consultancy complete our suite of solutions and services. In 2025, BCD achieved $24.4 billion in sales. For more information, visit www.bcdtravel.com .

What’s in it for you

• Flexible working hours and work-from-home or remote opportunities
• Opportunities to grow your skillset and career
• Work at the forefront of travel technology and help shape the future of business travel
• Generous vacation days so you can rest and recharge
• A compensation package that feels fair to you, including mental, physical, and financial wellbeing tools
• Travel industry professional perks and discounts
• An inclusive work environment where diversity is celebrated
• Work From Anywhere opportunity for 60 days per year

We’re dedicated to building a diverse, inclusive and authentic workplace.

We are committed to providing reasonable and necessary accommodations to ensure all employees can perform their roles effectively. For accommodation requests or further information, contact our Talent Acquisition department at [e-mail] .