[Hiring] Senior Security Compliance Program Manager @BCD

Role Description

As a member of the Information Security team, you will lead the Security Compliance team and collaborate with stakeholders across Technology, Cybersecurity, HR, Internal Audit, External Audit, Legal/Privacy, and Business Operations. This role is responsible for leading and maturing the organization's global Information Security Compliance Program which includes multiple compliance projects, ensuring the successful delivery of compliance initiatives, certification renewals, audit readiness activities, compliance reporting, and continuous improvement efforts across multiple business units, geographic regions, and regulatory environments.

The successful candidate will bring strong cybersecurity compliance and program management expertise, along with a passion for developing high-performing teams. This individual will own a portfolio of global compliance programs, drive strategic initiatives from planning through execution, manage budget and resource priorities, and influence cross-functional stakeholders to achieve successful business and compliance outcomes. The role will also help advance operational efficiency through the adoption of automation, emerging technologies, and AI-enabled capabilities while partnering with technology and AI leaders to support responsible innovation.

As a Senior Security Compliance Program Manager, you will:

• Lead and mature global Information Security Compliance program, ensuring achievement of compliance requirements, certification objectives, and business outcomes.
• Own and maintain the multi-year Information Security Compliance roadmap, ensuring alignment with organizational objectives and regulatory requirements.
• Lead a portfolio of strategic compliance initiatives and multiple concurrent projects, managing priorities, dependencies, risks, resources, budgets, and delivery milestones.
• Lead a team of compliance professionals, fostering accountability, collaboration, continuous improvement, and professional growth.
• Own the prioritization and continuous improvement of compliance programs supporting frameworks such as ISO 27001, PCI DSS, SOC, NIST, CMMC, and other applicable standards.
• Manage resource allocation, priorities, risks, and dependencies to ensure successful delivery and alignment with organizational objectives.
• Lead complex compliance initiatives, assessments, certifications, and strategic programs from planning through execution.
• Serve as a trusted advisor and compliance leader, influencing decisions and driving accountability across global teams and business functions.
• Develop and maintain KPIs, dashboards, and executive reporting to provide visibility into compliance performance, risks, and program health.
• Identify opportunities to improve compliance effectiveness through process optimization, automation, and emerging technologies, including AI-enabled capabilities.
• Monitor regulatory developments, cybersecurity trends, and evolving compliance requirements to continuously strengthen the compliance program.

Qualifications

• BA/BS in Cybersecurity, Information Security, Computer Science, or similar field (or BA/BS in Business with a minor in Computer Science, Information Systems, or similar field), or equivalent work experience.
• Extensive experience leading enterprise technology, cybersecurity, compliance, or transformation programs consisting of multiple concurrent projects and workstreams.
• Demonstrated experience managing portfolios of strategic initiatives, including roadmap development, program governance, executive stakeholder engagement, and delivery of complex enterprise-wide programs.
• Proven success leading complex multi-project programs, including resource planning, budget management, dependency management, risk management, and executive reporting.
• Seasoned professional in corporate communications, presentation, and risk awareness.
• Proven ability to prioritize and manage technical dependencies across teams.
• Experience with compliance programs such as GDPR, ISO 27001, SOC 2, PCI, NIST 800-53, FEDRAMP or other security/privacy frameworks.
• PMP, Prince2, PMP-ACP or PgMP certification required.
• PgMP certification is highly preferred.
• Experience in driving key information security, compliance, and other regulatory requirements internally and externally.
• Experience with cross-functional risk, compliance and/or information security disciplines.
• Strong knowledge of security controls, identifying risk areas and risk treatment and control mitigation.

Benefits

• Flexible working hours and work-from-home or remote opportunities.
• Opportunities to grow your skillset and career.
• Generous vacation days so you can rest and recharge.
• A compensation package that feels fair to you, including mental, physical, and financial wellbeing tools.
• Travel industry professional perks and discounts.
• An inclusive work environment where diversity is celebrated.

Company Description

BCD Travel helps companies travel smart and achieve more. We drive program adoption, cost savings and talent retention through digital experiences that simplify business travel. Our 15,000+ dedicated team members service clients in 170+ countries as we shape a sustainable future for business travel. BCD’s leading meetings and events management and global consultancy services complete our comprehensive suite of solutions for all aspects of corporate travel. In 2024, BCD achieved US$22.9 billion in sales.