Senior Information Security Auditor

• Own end-to-end delivery of audit engagements, including risk-based scoping, planning, execution, and reporting aligned to BCD’s priorities
• Lead audits and validate control effectiveness against security frameworks and regulatory requirements
• Collaborate with compliance, cybersecurity, operational and technical management, business leaders, and other stakeholders
• Develop audit plans, conduct internal audits, prepare and present findings, and review and approve corrective action plans
• Lead post-audit meetings with management to discuss scope and audit issues and present recommendations and corrective actions
• Liaise with internal and external auditors to manage IT security and compliance reviews
• Contribute to performance measurement preparation and reporting of functional metrics
• Monitor emerging regulations and trends affecting the risk landscape and adjust audit plans or procedures accordingly

• Bachelor's degree in Cybersecurity, Information Technology, Computer Science, or related field, or equivalent practical experience
• Proven experience leading complex audit engagements
• Demonstrated experience with audit evidence validation, control testing methodologies, and defensible audit documentation aligned to external audit standards
• Prior Auditing experience of ISO Management Systems (ISO 27001), SOC2, or PCI
• Extensive experience as a security controls assessor or IT auditor of security frameworks such as NIST, ISO 27001, SOC 2, PCI DSS, GDPR, or CMMC
• Strong understanding of IT systems, software development, networking, architecture, and lifecycles
• One or more active certifications from ISACA (e.g., CISM, CISA) or ISC2 (e.g., CISSP, SSCP, CCSP) or ISO 27001:2022 Lead Auditor
• Confident working with individuals at various levels of an organization in a consultative manner
• Familiarity with data analytics and AI/ML concepts
• Certified ISO 42001:2023 Lead Auditor is a plus

• Flexible working hours and work-from-home or remote opportunities
• Opportunities to grow your skillset and career
• Work at the forefront of travel technology and help shape the future of business travel
• Generous vacation days
• Compensation package including mental, physical, and financial wellbeing tools
• Travel industry professional perks and discounts
• Inclusive work environment where diversity is celebrated
• Work From Anywhere opportunity for 60 days per year