Senior Manager- Information Security (IN, India, Virtual, APAC)
BCD Travel
IndiaremotePosted 1 month ago
Skill Required
Information-Security-ComplianceSecurity-Compliance-ManagementCybersecurity-ComplianceCompliance-Program-ManagementIT-SecuritySenior-IT-Security-ManagerSenior-Information-Assurance-ManagerSenior-Manager-Cybersecurity-EngineeringSenior-Security-Engineering-ManagerSenior-Enterprise-Security-ManagerSenior-Security-ArchitectsecurityCybersecurityISO 27001automationdevelopingbuildingandAIFulltime
Key highlights
- Full-time, remote role based in India and Colombia
- PMP, Prince2, PMP-ACP, or PgMP certification required
- Leadership experience managing and developing compliance teams
- Extensive project and program management experience in cybersecurity/compliance required
- Experience with ISO 27001, SOC 2, PCI DSS, NIST 800-53, GDPR, FEDRAMP, and CMMC frameworks
- Generous vacation, flexible working hours, and travel industry perks offered
Role overview
BCD Travel is seeking a Senior Manager, Information Security Compliance to lead their global compliance program on a remote basis (India, Colombia). The role involves managing a team of compliance professionals, driving certification renewals and audit readiness, and owning a portfolio of global compliance programs spanning frameworks like ISO 27001, SOC, NIST, CMMC, PCI DSS, and more. The position requires strong cybersecurity compliance expertise, program management skills, and the ability to influence cross-functional stakeholders across Technology, Cybersecurity, HR, Internal Audit, External Audit, Legal/Privacy, and Business Operations.
Responsibilities
- Lead and mature global Information Security Compliance program, ensuring achievement of compliance requirements, certification objectives, and business outcomes
- Lead a team of compliance professionals, fostering accountability, collaboration, continuous improvement, and professional growth
- Own the prioritization and continuous improvement of compliance programs supporting frameworks such as ISO 27001, PCI DSS, SOC, NIST, CMMC, and other applicable standards
- Manage resource allocation, priorities, risks, and dependencies to ensure successful delivery and alignment with organizational objectives
- Lead complex compliance initiatives, assessments, certifications, and strategic programs from planning through execution
- Serve as a trusted advisor and compliance leader, influencing decisions and driving accountability across global teams and business functions
- Develop and maintain KPIs, dashboards, and executive reporting to provide visibility into compliance performance, risks, and program health
- Identify opportunities to improve compliance effectiveness through process optimization, automation, and emerging technologies, including AI-enabled capabilities
- Monitor regulatory developments, cybersecurity trends, and evolving compliance requirements to continuously strengthen the compliance program
- Collaborate with stakeholders across Technology, Cybersecurity, HR, Internal Audit, External Audit, Legal/Privacy, and Business Operations
- Ensure successful delivery of compliance initiatives, certification renewals, audit readiness activities, compliance reporting, and continuous improvement efforts across multiple business units, geographic regions, and regulatory environments
- Drive strategic initiatives from planning through execution, manage budget and resource priorities, and influence cross-functional stakeholders to achieve successful business and compliance outcomes
- Partner with technology and AI leaders to support responsible innovation
Requirements
- BA/BS in Cybersecurity, Information Security, Computer Science, or similar field (or BA/BS in Business with a minor in Computer Science, Information Systems, or similar field), or equivalent work experience
- Extensive project management experience leading technology and/or cybersecurity projects
- Prior program management experience leading information security, cybersecurity, and technology projects
- Previous leadership experience, including coaching, performance management, and team development
- Experience driving and managing full lifecycle projects and complex multi-project programs
- Seasoned professional in corporate communications, presentation, and risk awareness
- Proven ability to prioritize and manage technical dependencies across teams
- Experience with compliance programs such as GDPR, ISO 27001, SOC 2, PCI, NIST 800-53, FEDRAMP or other security/privacy frameworks
- PMP, Prince2, PMP-ACP or PgMP certification required
- Experience in driving key information security, compliance, and other regulatory requirements internally and externally
- Experience with cross-functional risk, compliance and/or information security disciplines
- Strong knowledge of security controls, identifying risk areas and risk treatment and control mitigation
Benefits
- Flexible working hours and work-from-home or remote opportunities
- Opportunities to grow your skillset and career
- Generous vacation days so you can rest and recharge
- A compensation package that feels fair, including mental, physical, and financial wellbeing tools
- Travel industry professional perks and discounts
- An inclusive work environment where diversity is celebrated
Additional details
- Title: Senior Manager, Information Security Compliance
- Location: Remote, India, Colombia
- Employment type: Full time
- Original source: Himalayas
- BCD Travel has 15,000+ dedicated team members servicing clients in 170+ countries
- In 2024, BCD achieved US$22.9 billion in sales
- Sustainability and helping others is high on their list; charitable activities in communities across the globe
- We're dedicated to building a diverse, inclusive and authentic workplace
- If you're excited about a role but your experience doesn't align perfectly, you are still encouraged to apply
- BCD is committed to providing reasonable and necessary accommodations; contact Talent Acquisition department for accommodation requests