Senior Analyst

**Start your journey with BCD: Grow, connect, collaborate and celebrate with our global team**

**Senior Security Audit & Assurance Analyst PCI ISA QSA Remote**
- Full time, Colombia, Costa Rica_

The Senior Audit Assurance team member will support the organization’s PCI compliance program by leveraging a strong background in PCI as a current or former PCI QSA or ISA. This includes evaluating, monitoring and demonstrating adherence to PCI DSS requirements for both internal and external audits. The role requires ownership of compliance processes and the development of supporting documentation. This individual will also work to improve and streamline internal procedures that support ongoing PCI and other compliance efforts.

**As a Senior Audit Assurance Team Member - PCI DSS, you will**
- Review and validate compliance evidence to ensure alignment with PCI DSS requirements; recommend alternative evidence where needed
- Own and manage core compliance processes, including evidence collection, tracking, and remediation workflows
- Design and implement standardized processes or templates to enhance automation and efficiency in audit deliverables
- Collaborate with internal teams and external assessors to communicate, educate, and demonstrate various security standards (PCI, ISO, etc.) requirements effectively
- Assess and document security and compliance risks in the context of business operations
- Develop, communicate, and help execute remediation plans to address compliance gaps and reduce organizational risk

**About you**
- Current or former as a PCI-QSA or PCI-ISA, with a deep understanding of security architecture and scoping engagement.
- Strong audit experience with additional frameworks such as ISO 27001, SOC1, SOC 2 and CMMC.
- Professional certifications such as CISA, CISM, CISSP, or equivalent
- Proven expertise in auditing and scoping PCI DSS compliance across complex, non-traditional, and emerging cardholder data environments
- Audit experience with enterprise-level security tools and technologies such as multi-factor authentication (MFA), centralized logging, privileged access management (PAM), key management/encryption vaults, vulnerability scans, and anti-malware platforms
- Excellent communication skills, with the ability to convey technical concepts to non-technical stakeholders

**About us**
We’re a market leader in travel management: We help people and companies travel smart and achieve more, and our clients include some of the world’s best-known and most innovative business and consumer brands. We operate in more than 100 countries, and the majority of our 10,000+ people work virtually (because a 10-second commute usually makes awesome sense). We’re committed to sustainability and to driving success for our customers, our business and ourselves. Learn more about BCD Travel.

**Your life at BCD**

Working at BCD means connecting, collaborating and celebrating. You’ll be part of a virtual, dynamic and flexible work environment that fosters a good work-life balance so you can focus on what makes you happy. But don’t just take our word for it Hear why people join BCD and more about the great perks of Life at BCD.

**You’ll be offered**
- Flexible working hours and work-from-home or remote opportunities
- Opportunities to grow your skillset and career
- Generous vacation days so you can rest and recharge
- A compensation package that feels fair to you, including mental, physical, and financial wellbeing tools
- Travel industry professional perks and discounts
- An inclusive work environment where diversity is celebrated
- We’re dedicated to building a diverse, inclusive and authentic workplace. If you’re excited about a role, but your experience doesn’t align perfectly, we still encourage you to apply._#LI-Remote

LI-VP1