Senior Information Security Auditor — Remote & Flexible

BCD Travel; United States; Remote; USD 110,000 - 160,000; Full time

Benefits offered by this job

Flexible working hours

Work From Anywhere 60 days per year

Generous vacation days

Wellbeing tools

Travel industry perks and discounts

Job summary

BCD Travel seeks a Senior Information Security Auditor to lead end-to-end audit engagements from scoping to reporting, ensuring compliance with NIST, ISO 27001, SOC 2, PCI DSS, GDPR and other regulations. This remote role supports teams across Colombia, Costa Rica and Mexico.

You’ll collaborate with stakeholders, validate controls, present findings, and guide corrective actions. The ideal candidate holds ISACA/ISC2 certifications (CISA/CISM or CISSP), and has deep IT security knowledge and audit

Qualifications

• Bachelor's degree in Cybersecurity, Information Technology, Computer Science, or related field, or equivalent practical experience.
• Proven experience leading complex audit engagements.
• Demonstrated experience with audit evidence validation, control testing methodologies, and defensible audit documentation aligned to external audit standards.
• Prior Auditing experience of ISO Management Systems (ISO 27001), SOC2, or PCI.
• Extensive experience as a security controls assessor or IT auditor of security frameworks such as NIST, ISO 27001, SOC 2, PCI DSS, GDPR, or CMMC.
• Strong understanding of IT systems, software development, networking, architecture, and lifecycles.
• One or more active certifications from ISACA (e.g., CISM, CISA) or ISC2 (e.g., CISSP, SSCP, CCSP) or ISO 27001:2022 Lead Auditor.
• Confident working with individuals at various levels of an organization in a consultative manner.
• Familiarity with data analytics and AI/ML concepts.
• Certified ISO 42001:2023 Lead Auditor is a plus.

Responsibilities

• Own the end-to-end delivery of audit engagements, including risk-based scoping, planning, execution, and reporting aligned to BCD’s priorities
• Lead audit and validate control effectiveness against security frameworks (NIST, ISO 27001, SOC 2, CMMC, PCI DSS) and regulatory requirements (GDPR, CCPA/CCRA, etc.)
• Collaborate with compliance, cybersecurity, operational and technical management, business leaders and other stakeholders to gain credibility and ensure the success of the audit
• Develop audit plans, conduct internal audits, prepare and present findings, and review and approve corrective action plans
• Lead post-audit meetings with management to discuss scope and audit issues and present recommendations and corrective actions
• Liaise with internal and external auditors to manage IT security and compliance reviews
• Contribute to performance measurement preparation and reporting of functional metrics
• Stay abreast of new and emerging regulations & trends that impact the risk landscape and rapidly adjust audit plan or procedures accordingly

Skills

Audit leadership

NIST

ISO 27001

SOC 2

PCI DSS

GDPR/CCPA

CISA/CISM

CISSP/CCSP

Data analytics concepts

Education

Bachelor's degree in Cybersecurity/IT/CS

Tools

ISO 27001 Lead Auditor

Audit evidence validation

Job description

BCD Travel seeks a Senior Information Security Auditor to lead end-to-end audit engagements from scoping to reporting, ensuring compliance with NIST, ISO 27001, SOC 2, PCI DSS, GDPR and other regulations. This remote role supports teams across Colombia, Costa Rica and Mexico.

You’ll collaborate with stakeholders, validate controls, present findings, and guide corrective actions. The ideal candidate holds ISACA/ISC2 certifications (CISA/CISM or CISSP), and has deep IT security knowledge and audit