Information Security Audit & GRC Manage

Information Security Audit & GRC Manager

Location: Bogotá, Colombia | Hybrid

English: B2+ required

About the Role

Join Auxis as an Information Security Audit & GRC Manager and play a key role in Information Security, Risk, Compliance, and IT Audit initiatives.

You will lead internal and external audits, evaluate security controls, identify risks and gaps, and work with teams across the organization to strengthen security and compliance programs.

What You’ll Do

• Lead internal and external IT and Information Security audits.

• Plan audits, define scope, coordinate timelines, and oversee execution.

• Perform control testing and evaluate security controls.

• Identify risks and gaps and drive remediation.

• Support compliance with ISO 27001, NIST, SOC 2, GDPR, and related standards.

• Work with GRC tools to manage controls, risks, assessments, evidence, and remediation.

• Partner with Technology, Risk, Compliance, and business stakeholders.

• Prepare clear audit, risk, and compliance reports for leadership.

What You Bring

• Experience in IT Audit, Information Security, Risk, Compliance, or GRC.

• Experience with security controls, control testing, and IT audits.

• Knowledge of frameworks such as ISO 27001, NIST, or SOC 2.

• Experience with GRC tools.

• Strong analytical, communication, and stakeholder management skills.

• Bachelor’s degree in Computer Science, Engineering, Information Security, or a related field, or equivalent experience.

• B2+ English proficiency.

• CISA, CRISC, CISM, or CISSP certification is preferred.