Senior Information Security Auditor

BCD Travel

. Own end-to-end delivery of audit engagements, including risk-based scoping, planning, execution, and reporting aligned to BCD’s priorities .

Posted 10/9/2026full-timeRemote • Colombia, Costa Rica, MexicoSeniorWebsite

Core Competencies

Role fit

Core Competencies

Use this summary to align your resume positioning with the role.

Demonstrates expertise in leading audit engagements, validating control effectiveness against security frameworks, and ensuring compliance with regulatory requirements. Proficient in developing audit plans, conducting internal audits, and presenting findings to stakeholders.

Highest-signal resume keywords

Audit Engagement LeadershipControl Testing MethodologiesISO 27001 ComplianceCISA CertificationNIST Framework Assessment

ATS Keywords

Tailor your resume

Applicant Tracking System Keywords

Tip: use these terms in your resume and cover letter to boost ATS matches.

Hard Skills

Audit Evidence ValidationControl TestingIT Security AssessmentData AnalyticsCybersecurity Knowledge

Soft Skills

Consultative CommunicationStakeholder CollaborationPresentation Skills

Tools & Technologies

ISO Management SystemsSOC 2PCI DSSGDPRCMMC

Certifications & Qualifications

CISMCISACISSPSSCPISO 27001:2022 Lead Auditor

Industry Keywords

Risk-Based ScopingAudit PlanningControl EffectivenessEmerging RegulationsFunctional Metrics

Tech Stack

Tools & technologies

Cyber Security

About the role

Key responsibilities & impact

Own end-to-end delivery of audit engagements, including risk-based scoping, planning, execution, and reporting aligned to BCD’s priorities
Lead audits and validate control effectiveness against security frameworks and regulatory requirements
Collaborate with compliance, cybersecurity, operational and technical management, business leaders, and other stakeholders
Develop audit plans, conduct internal audits, prepare and present findings, and review and approve corrective action plans
Lead post-audit meetings with management to discuss scope and audit issues and present recommendations and corrective actions
Liaise with internal and external auditors to manage IT security and compliance reviews
Contribute to performance measurement preparation and reporting of functional metrics
Monitor emerging regulations and trends affecting the risk landscape and adjust audit plans or procedures accordingly

Requirements

What you’ll need

Bachelor's degree in Cybersecurity, Information Technology, Computer Science, or related field, or equivalent practical experience
Proven experience leading complex audit engagements
Demonstrated experience with audit evidence validation, control testing methodologies, and defensible audit documentation aligned to external audit standards
Prior Auditing experience of ISO Management Systems (ISO 27001), SOC2, or PCI
Extensive experience as a security controls assessor or IT auditor of security frameworks such as NIST, ISO 27001, SOC 2, PCI DSS, GDPR, or CMMC
Strong understanding of IT systems, software development, networking, architecture, and lifecycles
One or more active certifications from ISACA (e.g., CISM, CISA) or ISC2 (e.g., CISSP, SSCP, CCSP) or ISO 27001:2022 Lead Auditor
Confident working with individuals at various levels of an organization in a consultative manner
Familiarity with data analytics and AI/ML concepts
Certified ISO 42001:2023 Lead Auditor is a plus

Benefits

Comp & perks

Flexible working hours and work-from-home or remote opportunities
Opportunities to grow your skillset and career
Work at the forefront of travel technology and help shape the future of business travel
Generous vacation days
Compensation package including mental, physical, and financial wellbeing tools
Travel industry professional perks and discounts
Inclusive work environment where diversity is celebrated
Work From Anywhere opportunity for 60 days per year