> Markdown version of [/jobs/ext/165300-senior-manager-information-security-audit-and-assurance-pci-isa-or-qsa-remote](https://www.wearedevelopers.com/jobs/ext/165300-senior-manager-information-security-audit-and-assurance-pci-isa-or-qsa-remote). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md).

---

# Senior Manager, Information Security Audit and Assurance PCI ISA or QSA Remote

- **Company:** BCD, Inc.
- **Location:** Mexico, ME, United States (Remote available)
- **Experience:** Expert
- **Contract:** Permanent contract
- **Skills:** Cyber Security, Data Infrastructure, PCI Data Security Standards
- **Published:** May 19, 2026
- **Apply:** https://www.indeed.com/viewjob?jk=305d55958118becc

## About the Role

* Several years Cyber/InfoSec Managerial experience
 * Extensive years of audit experience
 * Current or former as a PCI-QSA or PCI-ISA, with a deep understanding of PCI DSS v4.0.1 requirements (preferred)
 * Strong audit experience with additional frameworks such as ISO 27001, SOC 1, SOC 2, and CMMC (NIST 800-171)
 * Proven expertise in auditing including scoping compliance across complex, non-traditional, and emerging data environments
 * Professional certifications such as CISA, CISM, CISSP, or equivalent
 * Excellent communication skills, with the ability to convey technical concepts to non-technical stakeholders

## Description

The Senior Manager Audit Assurance will support the organization's security program by maintaining compliance with BCD's obligations. The role requires leading a team of security controls assessors with responsibility for validating and ensuring effectiveness of enterprise controls. The role requires ownership of compliance processes and the development of supporting documentation. This individual will also work to improve and streamline internal procedures that support ongoing PCI and other compliance efforts., * Lead and mentor a team of Security Control assessors in conducting comprehensive audits, identifying gaps and providing recommendations

 * Assess and document security and compliance risks and deficiencies within business operations, focusing on gaps in security controls
 * Develop, communicate, and oversee remediation plans to address compliance gaps and reduce organizational risk
 * Collaborate with internal teams and external assessors to communicate, educate, and demonstrate various security standards (PCI, ISO, etc.) requirements effectively
 * Design and implement standardized processes or templates to enhance automation and efficiency in audit deliverables, We are committed to providing reasonable and necessary accommodations to ensure all employees can perform their roles effectively. For accommodation requests or further information, contact our Talent Acquisition department at careers@bcdtravel.com.


## Related Videos

- [GitOps keeps focus on apps, not on infrastructure](https://www.wearedevelopers.com/videos/182-gitops-keeps-focus-on-apps-not-on-infrastructure)
- [Beyond Dashboards: Fixing Text-to-SQL with Semantic RAG](https://www.wearedevelopers.com/videos/2036-beyond-dashboards-fixing-text-to-sql-with-semantic-rag)
- [Thinking Differently - How to Make Money from Cyber Attacks & Cheats](https://www.wearedevelopers.com/videos/745-thinking-differently-how-to-make-money-from-cyber-attacks-cheats)
- [Security Pitfalls for Software Engineers](https://www.wearedevelopers.com/videos/726-security-pitfalls-for-software-engineers)
- [One Pipeline, Three Regulator - SBOM Compliance for the Developer](https://www.wearedevelopers.com/videos/100169-one-pipeline-three-regulator-sbom-compliance-for-the-developer)
- [What makes Cybersecurity different for critical infrastructure?](https://www.wearedevelopers.com/videos/571-what-makes-cybersecurity-different-for-critical-infrastructure)

## Related Articles

- [9 Ways to Make Money Hacking](https://www.wearedevelopers.com/magazine/333-9-ways-to-make-money-hacking)
- [Fully Remote Software Engineer Jobs](https://www.wearedevelopers.com/magazine/447-fully-remote-software-engineer-jobs)
- [Events like RSAC Get You CISOs. Developers Decide What Actually Gets Deployed.](https://www.wearedevelopers.com/magazine/693-events-like-rsac-get-you-cisos-developers-decide-what-actually-gets-deployed)
- [Best Paying Remote Jobs](https://www.wearedevelopers.com/magazine/255-best-paying-remote-jobs)
- [Best Paying Jobs in Technology](https://www.wearedevelopers.com/magazine/256-best-paying-jobs-in-technology)
- [What Are The Top Skills Required For Azure Developers?](https://www.wearedevelopers.com/magazine/77-what-are-the-top-skills-required-for-azure-developers)