Risk & Compliance Intern

This is a fully remote position, open to applicants in India.

📋 Description

• Assist in compliance efforts related to ISO/IEC 27001, ISO/IEC 42001, ISO/IEC 27701, and other relevant frameworks.

• Help plan, coordinate, and support external certification and surveillance audits.

• Collect, organize, and maintain documentation and evidence for audits and compliance.

• Monitor audit findings, observations, and remediation actions to ensure timely resolutions.

• Aid in the creation of training modules and awareness materials concerning ISO frameworks and organizational compliance requirements.

• Facilitate internal compliance awareness sessions and training initiatives.

• Assist in reviewing, updating, and maintaining compliance policies, procedures, trackers, and documentation processes.

• Collaborate with cross-functional teams to gather evidence and track compliance activities.

• Support internal compliance assessments, risk reviews, and documentation tasks.

• Maintain precise compliance records and contribute to continuous improvement efforts.

• Assist with information security program activities, including SOC 2 Type II readiness, security control testing, and evidence gathering.

• Support the vendor and third-party security assessment processes, including the distribution and review of security questionnaires.

• Aid in security awareness and training initiatives, including monitoring completion rates and updating training materials.

⛳️ Requirements

• Possess a Bachelor's or Master's degree.

• Experience in supporting external audits for at least one ISO framework, such as ISO/IEC 27001, ISO/IEC 42001, or ISO/IEC 27701.

• Knowledge of ISO standards, audit processes, and compliance documentation.

• Familiarity with documentation management and evidence collection for audits.

• Strong organizational skills coupled with meticulous attention to detail.

• Excellent written and verbal communication abilities.

• Capacity to work independently while effectively collaborating with cross-functional teams.

• Basic understanding of information security principles, including access controls, vulnerability management, and incident response concepts.

• Familiarity with SOC 2 Type II criteria or a willingness to learn.

• Experience with internal audits, risk assessments, or compliance management.

• Knowledge of GRC concepts.

• Familiarity with additional security or privacy frameworks, such as SOC 2, GDPR, or relevant regulatory standards.

• Proficiency in Microsoft Office or Google Workspace, especially Excel, Word, and PowerPoint.

• 1-2 years of relevant experience in compliance activities or with any ISO framework.

• Experience in vendor risk management or third-party security assessments.

• Exposure to contract management systems, legal operations workflows, or policy management tools.

• Availability for approximately 20 hours per week (India time zone).

🏝️ Benefits

• Fully remote work environment.

• Opportunities for in-person connections.

• Comprehensive benefits for health, wealth, and well-being.

• Flexible work schedule based on team needs.