Director of Global Security Operations

The Senior Information Security Auditor will support BCD’s information assurance and compliance program by leading audit engagements conducting assessments and audits to measure the effectiveness of our compliance and security systems. The auditor will ensure that BCD’s security and data privacy policies, operations, and systems comply with all relevant regulations, statues and client requirements.

What You'll Do

Own the end-to-end delivery of audit engagements, including risk-based scoping, planning, execution, and reporting aligned to BCD’s priorities
Lead audit and validate control effectiveness against security frameworks (NIST, ISO 27001, SOC 2, CMMC, PCI DSS) and regulatory requirements (GDPR, CCPA/CCRA, etc.).
Collaborate with compliance, cybersecurity, operational and technical management, business leaders and other stakeholders to gain credibility and ensure the success of the audit
Develop audit plans, conduct internal audits, prepare and present findings, and review and approve corrective action plans
Lead post-audit meetings with management to discuss scope and audit issues and present recommendations and corrective actions
Liaise with internal and external auditors to manage IT security and compliance reviews
Contribute to performance measurement preparation and reporting of functional metrics
Stay abreast of new and emerging regulations & trends that impact the risk landscape and rapidly adjust audit plan or procedures accordingly

What You'll Bring

Bachelor's degree in Cybersecurity, Information Technology, Computer Science, or related field, or equivalent practical experience
Proven experience leading complex audit engagements
Demonstrated experience with audit evidence validation, control testing methodologies, and defensible audit documentation aligned to external audit standards
Prior Auditing experience of ISO Management Systems (ISO 27001), SOC2, or PCI
Extensive experience as a security controls assessor or IT auditor of security frameworks such as NIST, ISO 27001, SOC 2, PCI DSS, GDPR, or CMMC
Strong understanding of IT systems, software development, networking, architecture, and lifecycles
One or more active certifications from ISACA (e.g., CISM, CISA) or ISC2 (e.g., CISSP, SSCP, CCSP) or ISO 27001:2022 Lead Auditor
Confident working with individuals at various levels of an organization in a consultative manner
Familiarity with data analytics and AI/ML concepts
Certified ISO 42001:2023 Lead Auditor is a plus

Why you’ll love working here
Join a global industry leader where curiosity drives innovation, growth is continuous, and every voice matters. At BCD, you'll have the freedom to make an impact, the support to develop your potential, and the opportunity to help shape the future of travel.

Meet BCD
BCD Travel creates connections that move people and ideas forward. Through open technology and trusted human expertise, we help companies and people navigate change, simplify complexity and make confident decisions about how and when they travel. Our intuitive digital experiences for every stakeholder power journeys that fuel success and drive progress. With 15,000+ dedicated team members serving clients in 170+ countries, BCD is shaping a more sustainable future for business travel. Industry-leading meetings and events management and a global consultancy complete our suite of solutions and services. In 2025, BCD achieved $24.4 billion in sales. For more information, visit .

Get to know us by exploring our career site and checking out our social media:

Career site BCD

What’s in it for you

Flexible working hours and work-from-home or remote opportunities

Opportunities to grow your skillset and career

Work at the forefront of travel technology and help shape the future of business travel

Generous vacation days so you can rest and recharge

A compensation package that feels fair to you, including mental, physical, and financial wellbeing tools

Travel industry professional perks and discounts

An inclusive work environment where diversity is celebrated

Work From Anywhere opportunity for 60 days per year

Ready to shape what’s next? Apply now!

We’re dedicated to building a diverse, inclusive and authentic workplace. If you’re excited about a role, but your experience doesn’t align perfectly, we still encourage you to apply.

We are committed to providing reasonable and necessary accommodations to ensure all employees can perform their roles effectively. For accommodation requests or further information, contact our Talent Acquisition department at .

Originally posted on Himalayas

Job Description

Shape what's next with BCD

Senior Information Security Auditor (Remote)

Full time, Colombia, Costa Rica and Mexico

What You'll Do

Own the end-to-end delivery of audit engagements, including risk-based scoping, planning, execution, and reporting aligned to BCD’s priorities
Lead audit and validate control effectiveness against security frameworks (NIST, ISO 27001, SOC 2, CMMC, PCI DSS) and regulatory requirements (GDPR, CCPA/CCRA, etc.).
Collaborate with compliance, cybersecurity, operational and technical management, business leaders and other stakeholders to gain credibility and ensure the success of the audit
Develop audit plans, conduct internal audits, prepare and present findings, and review and approve corrective action plans
Lead post-audit meetings with management to discuss scope and audit issues and present recommendations and corrective actions
Liaise with internal and external auditors to manage IT security and compliance reviews
Contribute to performance measurement preparation and reporting of functional metrics
Stay abreast of new and emerging regulations & trends that impact the risk landscape and rapidly adjust audit plan or procedures accordingly

What You'll Bring

Bachelor's degree in Cybersecurity, Information Technology, Computer Science, or related field, or equivalent practical experience
Proven experience leading complex audit engagements
Demonstrated experience with audit evidence validation, control testing methodologies, and defensible audit documentation aligned to external audit standards
Prior Auditing experience of ISO Management Systems (ISO 27001), SOC2, or PCI
Extensive experience as a security controls assessor or IT auditor of security frameworks such as NIST, ISO 27001, SOC 2, PCI DSS, GDPR, or CMMC
Strong understanding of IT systems, software development, networking, architecture, and lifecycles
One or more active certifications from ISACA (e.g., CISM, CISA) or ISC2 (e.g., CISSP, SSCP, CCSP) or ISO 27001:2022 Lead Auditor
Confident working with individuals at various levels of an organization in a consultative manner
Familiarity with data analytics and AI/ML concepts
Certified ISO 42001:2023 Lead Auditor is a plus

Get to know us by exploring our career site and checking out our social media:

Career site BCD

What’s in it for you

Flexible working hours and work-from-home or remote opportunities

Opportunities to grow your skillset and career

Work at the forefront of travel technology and help shape the future of business travel

Generous vacation days so you can rest and recharge

A compensation package that feels fair to you, including mental, physical, and financial wellbeing tools

Travel industry professional perks and discounts

An inclusive work environment where diversity is celebrated

Work From Anywhere opportunity for 60 days per year

Originally posted on Himalayas

Job Description

Shape what's next with BCD

Senior Information Security Auditor (Remote)

Full time, Colombia, Costa Rica and Mexico

What You'll Do

Own the end-to-end delivery of audit engagements, including risk-based scoping, planning, execution, and reporting aligned to BCD’s priorities
Lead audit and validate control effectiveness against security frameworks (NIST, ISO 27001, SOC 2, CMMC, PCI DSS) and regulatory requirements (GDPR, CCPA/CCRA, etc.).
Collaborate with compliance, cybersecurity, operational and technical management, business leaders and other stakeholders to gain credibility and ensure the success of the audit
Develop audit plans, conduct internal audits, prepare and present findings, and review and approve corrective action plans
Lead post-audit meetings with management to discuss scope and audit issues and present recommendations and corrective actions
Liaise with internal and external auditors to manage IT security and compliance reviews
Contribute to performance measurement preparation and reporting of functional metrics
Stay abreast of new and emerging regulations & trends that impact the risk landscape and rapidly adjust audit plan or procedures accordingly

What You'll Bring

Bachelor's degree in Cybersecurity, Information Technology, Computer Science, or related field, or equivalent practical experience
Proven experience leading complex audit engagements
Demonstrated experience with audit evidence validation, control testing methodologies, and defensible audit documentation aligned to external audit standards
Prior Auditing experience of ISO Management Systems (ISO 27001), SOC2, or PCI
Extensive experience as a security controls assessor or IT auditor of security frameworks such as NIST, ISO 27001, SOC 2, PCI DSS, GDPR, or CMMC
Strong understanding of IT systems, software development, networking, architecture, and lifecycles
One or more active certifications from ISACA (e.g., CISM, CISA) or ISC2 (e.g., CISSP, SSCP, CCSP) or ISO 27001:2022 Lead Auditor
Confident working with individuals at various levels of an organization in a consultative manner
Familiarity with data analytics and AI/ML concepts
Certified ISO 42001:2023 Lead Auditor is a plus

Get to know us by exploring our career site and checking out our social media:

Career site BCD

What’s in it for you

Flexible working hours and work-from-home or remote opportunities

Opportunities to grow your skillset and career

Work at the forefront of travel technology and help shape the future of business travel

Generous vacation days so you can rest and recharge

A compensation package that feels fair to you, including mental, physical, and financial wellbeing tools

Travel industry professional perks and discounts

An inclusive work environment where diversity is celebrated

Work From Anywhere opportunity for 60 days per year

Originally posted on Himalayas

Job Description

Shape what's next with BCD

Senior Information Security Auditor (Remote)

Full time, Colombia, Costa Rica and Mexico

What You'll Do

Own the end-to-end delivery of audit engagements, including risk-based scoping, planning, execution, and reporting aligned to BCD’s priorities
Lead audit and validate control effectiveness against security frameworks (NIST, ISO 27001, SOC 2, CMMC, PCI DSS) and regulatory requirements (GDPR, CCPA/CCRA, etc.).
Collaborate with compliance, cybersecurity, operational and technical management, business leaders and other stakeholders to gain credibility and ensure the success of the audit
Develop audit plans, conduct internal audits, prepare and present findings, and review and approve corrective action plans
Lead post-audit meetings with management to discuss scope and audit issues and present recommendations and corrective actions
Liaise with internal and external auditors to manage IT security and compliance reviews
Contribute to performance measurement preparation and reporting of functional metrics
Stay abreast of new and emerging regulations & trends that impact the risk landscape and rapidly adjust audit plan or procedures accordingly

What You'll Bring

Bachelor's degree in Cybersecurity, Information Technology, Computer Science, or related field, or equivalent practical experience
Proven experience leading complex audit engagements
Demonstrated experience with audit evidence validation, control testing methodologies, and defensible audit documentation aligned to external audit standards
Prior Auditing experience of ISO Management Systems (ISO 27001), SOC2, or PCI
Extensive experience as a security controls assessor or IT auditor of security frameworks such as NIST, ISO 27001, SOC 2, PCI DSS, GDPR, or CMMC
Strong understanding of IT systems, software development, networking, architecture, and lifecycles
One or more active certifications from ISACA (e.g., CISM, CISA) or ISC2 (e.g., CISSP, SSCP, CCSP) or ISO 27001:2022 Lead Auditor
Confident working with individuals at various levels of an organization in a consultative manner
Familiarity with data analytics and AI/ML concepts
Certified ISO 42001:2023 Lead Auditor is a plus

Get to know us by exploring our career site and checking out our social media:

Career site BCD

What’s in it for you

Flexible working hours and work-from-home or remote opportunities

Opportunities to grow your skillset and career

Work at the forefront of travel technology and help shape the future of business travel

Generous vacation days so you can rest and recharge

A compensation package that feels fair to you, including mental, physical, and financial wellbeing tools

Travel industry professional perks and discounts

An inclusive work environment where diversity is celebrated

Work From Anywhere opportunity for 60 days per year

Originally posted on Himalayas