The Role
Support information security compliance, governance, risk, and audit activities across products, infrastructure, vendors, and business operations. Responsibilities include monitoring compliance programs, conducting vendor security reviews, coordinating client audits, responding to security questionnaires, maintaining policies and evidence, supporting risk assessments, tracking remediation, and preparing dashboards and reports. The role requires collaboration with technical and business stakeholders and familiarity with ISO 27001, SOC 2, PCI DSS, and security frameworks.
Summary Generated by Built In
About the Role
We are looking for a highly motivated and detail-oriented Internal Compliance who is passionate about information security, compliance, audits, and governance. The candidate will support compliance activities across SISA products, infrastructure, and business operations, ensuring adherence to regulatory, contractual, and industry security requirements.
Key ResponsibilitiesCompliance Management
- Track and monitor compliance status across all SISA products, cloud infrastructure, internal systems, and business functions.
- Support implementation and maintenance of compliance programs such as ISO 27001, SOC 2, PCI DSS, and other applicable standards.
- Follow up with internal stakeholders to ensure timely closure of compliance gaps and audit findings.
- Maintain compliance dashboards, trackers, and status reports.
Vendor Security Assessments
- Conduct security and compliance reviews of third-party vendors and service providers.
- Review vendor security questionnaires, certifications, and audit reports.
- Track vendor risks and remediation activities.
- Coordinate with procurement, legal, and technical teams during vendor onboarding and reviews.
Client Audits & Security Questionnaires
- Coordinate and support customer audits, due diligence assessments, and compliance reviews.
- Respond to client security questionnaires and compliance-related information requests.
- Collect, review, and maintain audit evidences required for client assessments.
- Work closely with product, infrastructure, and engineering teams to address client compliance requirements.
Documentation & Policy Management
- Create, review, and update policies, procedures, standards, guidelines, and compliance documentation.
- Maintain version control and document repositories.
- Ensure compliance documents remain current with changing regulatory and business requirements.
- Assist in developing audit-ready documentation and evidence repositories.
Risk & Governance Support
- Assist in compliance gap assessments and internal audits.
- Support risk assessments and compliance monitoring activities.
- Track corrective actions and ensure timely closure of observations.
- Support awareness sessions and compliance communications across the organization.
- Bachelor's degree in Computer Science, Information Security, IT, or a related field.
- 1-2 years of experience in Information Security, Compliance, Governance, Risk, or Audit functions.
- Basic understanding of ISO 27001, PCI DSS, SOC 2, cybersecurity frameworks, and security best practices.
- Good documentation, analytical, and communication skills.
- Proficiency in Microsoft Excel, Word, PowerPoint, and compliance tracking tools.
- Strong attention to detail and organizational skills.
- Ability to coordinate with multiple stakeholders and manage deadlines effectively.
- Knowledge of cloud platforms such as AWS or Azure.
- Exposure to security questionnaires, vendor risk assessments, and audit processes.
- Certifications such as ISO 27001 Foundation, Security+ will be an added advantage.
- Passionate about compliance, governance, and information security.
- Eager to learn and grow in a fast-paced environment.
- Self-driven, proactive, and accountable.
- Strong follow-up skills and ownership mindset.
- Ability to work independently while collaborating with cross-functional teams.
Experience Range: 1-2 Years
Employment Type: Full-Time
This role is ideal for candidates looking to build a long-term career in Information Security Compliance, Governance, Risk Management, and Audits.
Skills Required
- Bachelor's degree in Computer Science, Information Security, IT, or a related field
- 1-2 years of experience in Information Security, Compliance, Governance, Risk, or Audit functions
- Basic understanding of ISO 27001, PCI DSS, SOC 2, cybersecurity frameworks, and security best practices
- Good documentation, analytical, and communication skills
- Proficiency in Microsoft Excel, Word, PowerPoint, and compliance tracking tools
- Strong attention to detail and organizational skills
- Ability to coordinate with multiple stakeholders and manage deadlines effectively
- Knowledge of cloud platforms such as AWS or Azure
- Exposure to security questionnaires, vendor risk assessments, and audit processes
- ISO 27001 Foundation or Security+ certification
Am I A Good Fit?
Get Personalized Job Insights.
Our AI-powered fit analysis compares your resume with a job listing so you know if your skills & experience align.
Success! Refresh the page to see how your skills align with this role.
The Company
What We Do
Infosec is a cybersecurity education company that helps IT and security professionals advance their careers and helps employees become safer online at work and home. Its offerings include Infosec Skills, with more than 1,400 hands-on cybersecurity courses and instructor-led certification boot camps, and Infosec IQ, which provides security-awareness training. Its mission is to equip individuals and organizations to outsmart cybercrime.
.png){kind=logo}
