[Hiring] Senior Information Security Auditor @BCD

Role Description

The Senior Information Security Auditor will support BCD’s information assurance and compliance program by leading audit engagements conducting assessments and audits to measure the effectiveness of our compliance and security systems. The auditor will ensure that BCD’s security and data privacy policies, operations, and systems comply with all relevant regulations, statutes, and client requirements.

• Own the end-to-end delivery of audit engagements, including risk-based scoping, planning, execution, and reporting aligned to BCD’s priorities.
• Lead audit and validate control effectiveness against security frameworks (NIST, ISO 27001, SOC 2, CMMC, PCI DSS) and regulatory requirements (GDPR, CCPA/CCRA, etc.).
• Collaborate with compliance, cybersecurity, operational and technical management, business leaders, and other stakeholders to gain credibility and ensure the success of the audit.
• Develop audit plans, conduct internal audits, prepare and present findings, and review and approve corrective action plans.
• Lead post-audit meetings with management to discuss scope and audit issues and present recommendations and corrective actions.
• Liaise with internal and external auditors to manage IT security and compliance reviews.
• Contribute to performance measurement preparation and reporting of functional metrics.
• Stay abreast of new and emerging regulations & trends that impact the risk landscape and rapidly adjust audit plan or procedures accordingly.

Qualifications

• Bachelor's degree in Cybersecurity, Information Technology, Computer Science, or related field, or equivalent practical experience.
• Proven experience leading complex audit engagements.
• Demonstrated experience with audit evidence validation, control testing methodologies, and defensible audit documentation aligned to external audit standards.
• Prior auditing experience of ISO Management Systems (ISO 27001), SOC2, or PCI.
• Extensive experience as a security controls assessor or IT auditor of security frameworks such as NIST, ISO 27001, SOC 2, PCI DSS, GDPR, or CMMC.
• Strong understanding of IT systems, software development, networking, architecture, and lifecycles.
• One or more active certifications from ISACA (e.g., CISM, CISA) or ISC2 (e.g., CISSP, SSCP, CCSP) or ISO 27001:2022 Lead Auditor.
• Confident working with individuals at various levels of an organization in a consultative manner.
• Familiarity with data analytics and AI/ML concepts.
• Certified ISO 42001:2023 Lead Auditor is a plus.

Benefits

• Flexible working hours and work-from-home or remote opportunities.
• Opportunities to grow your skillset and career.
• Work at the forefront of travel technology and help shape the future of business travel.
• Generous vacation days so you can rest and recharge.
• A compensation package that feels fair to you, including mental, physical, and financial wellbeing tools.
• Travel industry professional perks and discounts.
• An inclusive work environment where diversity is celebrated.
• Work From Anywhere opportunity for 60 days per year.