Senior Manager, Information Security Audit and Assurance PCI ISA or QSA Remote

BCD, Inc.
Mexico, ME, United States
3 months ago

Role details

Contract type
Permanent contract
Employment type
Full-time (> 32 hours)
Experience level
Expert
Working hours
Shift work
Job source

Tech stack

Cyber Security Data Infrastructure PCI Data Security Standards

Job description

The Senior Manager Audit Assurance will support the organization’s security program by maintaining compliance with BCD’s obligations. The role requires leading a team of security controls assessors with responsibility for validating and ensuring effectiveness of enterprise controls. The role requires ownership of compliance processes and the development of supporting documentation. This individual will also work to improve and streamline internal procedures that support ongoing PCI and other compliance efforts., * Lead and mentor a team of Security Control assessors in conducting comprehensive audits, identifying gaps and providing recommendations

  • Assess and document security and compliance risks and deficiencies within business operations, focusing on gaps in security controls
  • Develop, communicate, and oversee remediation plans to address compliance gaps and reduce organizational risk
  • Collaborate with internal teams and external assessors to communicate, educate, and demonstrate various security standards (PCI, ISO, etc.) requirements effectively
  • Design and implement standardized processes or templates to enhance automation and efficiency in audit deliverables, We are committed to providing reasonable and necessary accommodations to ensure all employees can perform their roles effectively. For accommodation requests or further information, contact our Talent Acquisition department at careers@bcdtravel.com.

Requirements

  • Several years Cyber/InfoSec Managerial experience
  • Extensive years of audit experience
  • Current or former as a PCI-QSA or PCI-ISA, with a deep understanding of PCI DSS v4.0.1 requirements (preferred)
  • Strong audit experience with additional frameworks such as ISO 27001, SOC 1, SOC 2, and CMMC (NIST 800-171)
  • Proven expertise in auditing including scoping compliance across complex, non-traditional, and emerging data environments
  • Professional certifications such as CISA, CISM, CISSP, or equivalent
  • Excellent communication skills, with the ability to convey technical concepts to non-technical stakeholders

Benefits & conditions

Pulled from the full job description

  • Flexible schedule, Working at BCD means connecting, collaborating and celebrating. You’ll be part of a virtual, dynamic and flexible work environment that fosters a good work-life balance so you can focus on what makes you happy. But don’t just take our word for it! Hear why people join BCD and more about the great perks of Life at BCD.

You’ll be offered

  • Flexible working hours and work-from-home or remote opportunities
  • Opportunities to grow your skillset and career
  • Generous vacation days so you can rest and recharge
  • A compensation package that feels fair to you, including mental, physical, and financial wellbeing tools
  • Travel industry professional perks and discounts
  • An inclusive work environment where diversity is celebrated

About the company

We’re a market leader in travel management: We help people and companies travel smart and achieve more, and our clients include some of the world’s best-known and most innovative business and consumer brands. We operate in more than 100 countries, and the majority of our 10,000+ people work virtually (because a 10-second commute usually makes awesome sense). We’re committed to sustainability and to driving success for our customers, our business and ourselves. Learn more about BCD Travel.

Apply for this position

This job is hosted externally. Click below to view the full posting and apply.

Apply on indeed.com

Good distractions

Talks and stories from around this role — technically off-topic, practically not.

2:03 min

Platform compliance and security certifications for sensitive data

Chad Carlson · World Congress 2021

4:12 min

Introduction to the Bosch accelerator and data infrastructure

Michael Eisenbart · LIVE

4:11 min

Introduction to cloud-native application developer security

Micah Silverman · World Congress 2022

5:13 min

Audience Q&A on maturity assessments and external consultants

Mathias Tausig · LIVE

37 sec

Driving digital sovereignty through open federated data infrastructures

Francisco Carneiro Francisco Carneiro · World Congress 2025

3:44 min

Current industry adoption and future security initiatives

Alexander Allmendinger · LIVE

Videos

See all

Related articles

See all