Senior Information Security Auditor (Remote)

About the role

The Senior Information Security Auditor will support BCD’s information assurance and compliance program by leading audit engagements, conducting assessments and audits to measure the effectiveness of our security and data privacy controls.

Key responsibilities

• Own end‑to‑end delivery of audit engagements, including risk‑based scoping, planning, execution and reporting.
• Lead audits and validate control effectiveness against frameworks such as NIST, ISO 27001, SOC 2, CMMC, PCI DSS and regulations like GDPR and CCPA.
• Collaborate with compliance, cybersecurity, operational and technical teams to ensure audit success and credibility.
• Develop audit plans, conduct internal audits, present findings and approve corrective action plans.
• Lead post‑audit meetings with management and liaise with internal and external auditors.

Required profile

• Bachelor’s degree in Cybersecurity, IT, Computer Science or equivalent practical experience.
• Proven experience leading complex audit engagements and validating audit evidence.
• Strong understanding of IT systems, software development, networking, architecture and lifecycles.
• Active certifications such as CISM, CISA, CISSP, SSCP, CCSP or ISO 27001 Lead Auditor.

Required skills

• Security frameworks: NIST, ISO 27001, SOC 2, CMMC, PCI DSS.
• Regulatory knowledge: GDPR, CCPA/CCRA.
• Data analytics and AI/ML concepts.

What we offer

• Flexible working hours and remote work opportunities.
• Opportunities to grow skillset and career in travel technology.
• Generous vacation days and wellbeing tools.
• Travel industry professional perks and discounts.
• Inclusive, diverse workplace with a “Work From Anywhere” option for 60 days per year.