compliance and information security initiatives. The ideal candidate has hands-on
experience supporting external audits for one or more ISO management system frameworks,
such as ISO/IEC 27001, ISO/IEC 42001, or ISO/IEC 27701. This role involves assisting with
compliance activities, maintaining documentation, coordinating with internal teams and
supporting ongoing compliance programs.
What You'll Do
- Support compliance initiatives related to ISO/IEC 27001, ISO/IEC 42001, ISO/IEC
27701, and other applicable frameworks. - Assist in planning, coordinating, and supporting external certification and surveillance
audits. - Gather, organize, and maintain audit evidence and compliance documentation.
- Track audit findings, observations, and remediation activities to ensure timely closure.
- Assist in creating training modules and awareness materials for topics related to ISO
frameworks and organizational compliance requirements. - Support internal compliance awareness sessions and training programs.
- Assist in reviewing, updating, and maintaining compliance policies, procedures,
trackers, and process documentation. - Coordinate with cross-functional teams to collect evidence and monitor compliance
activities. - Support internal compliance assessments, risk reviews, and documentation activities.
- Maintain accurate compliance records and contribute to continuous improvement
initiatives. - Assist with information security program activities, including support for SOC 2 Type II
readiness, security control testing, and evidence collection. - Support vendor and third-party security assessment processes, including distribution
and review of security questionnaires. - Assist with security awareness and training initiatives, including tracking completion
rates and updating training content.
What You'll Bring
- Completed a Bachelor's or Master's degree
- Experience supporting external audits for at least one ISO framework, such as:
- ISO/IEC 27001 (Information Security Management)
- ISO/IEC 42001 (Artificial Intelligence Management)
- ISO/IEC 27701 (Privacy Information Management)
- Understanding of ISO standards, audit processes, and compliance documentation.
- Familiarity with documentation management and evidence collection for audits.
- Strong organizational skills and attention to detail.
- Excellent written and verbal communication skills.
- Ability to work independently while collaborating effectively with cross-functional
teams. - Basic understanding of information security principles, including access controls,
vulnerability management, and incident response concepts. - Familiarity with SOC 2 Type II criteria or willingness to learn.
- Exposure to internal audits, risk assessments, or compliance management.
- Familiarity with GRC concepts.
- Knowledge of additional security or privacy frameworks such as SOC 2, GDPR, or
applicable regulatory standards. - Proficiency with Microsoft Office or Google Workspace, particularly Excel, Word, and
PowerPoint. - 1-2 years of related experience in compliance activities or handling any ISO framework.
- Experience with vendor risk management or third-party security assessments.
- Exposure to contract management systems, legal operations workflows, or policy
management tools. - Part-time internship (Remote working)
- Approximately 20 hours per week (India time zone)
- Flexible work schedule based on team requirements
Skills Required
- Completed Bachelor's or Master's degree
- Experience supporting external audits for at least one ISO framework, such as ISO/IEC 27001, ISO/IEC 42001, or ISO/IEC 27701
- Understanding of ISO standards, audit processes, and compliance documentation
- Familiarity with documentation management and audit evidence collection
- Strong organizational skills and attention to detail
- Excellent written and verbal communication skills
- Ability to work independently while collaborating effectively with cross-functional teams
- Basic understanding of information security principles, including access controls, vulnerability management, and incident response
- Familiarity with SOC 2 Type II criteria or willingness to learn
- Exposure to internal audits, risk assessments, or compliance management
- Familiarity with GRC concepts
- Knowledge of additional security or privacy frameworks such as SOC 2, GDPR, or applicable regulatory standards
- Proficiency with Microsoft Office or Google Workspace, particularly Excel, Word, and PowerPoint
- 1-2 years of related experience in compliance activities or handling any ISO framework
- Experience with vendor risk management or third-party security assessments
- Exposure to contract management systems, legal operations workflows, or policy management tools
What We Do
Every year, tens of thousands of events – ranging from natural disasters to factory fires to health epidemics – shut down manufacturing and wreak havoc on global supply chains. We believe a resilient supply chain is good for everyone: it keeps product flowing, the world moving, and most importantly, people in their jobs. Resilinc was founded with the purpose of strengthening global supply chains, making them resilient, sustainable, transparent, and secure. We do this via our technology-driven solutions, which create an ecosystem where organizations can collaborate with their suppliers and customers with a spirit of transparency and trust to acquire unmatched visibility into their multi-tier supply networks, and partner across tiers seamlessly to recover supply chains during disruptions. Since our launch in 2010, Resilinc has defined the supply chain mapping, monitoring, and resiliency space and is widely considered the gold standard for supply chain resiliency, worldwide. With over 1 million supplier sites mapped encompassing over 4 million parts and raw materials, we are the first line of defense for our customers, helping them navigate supply disruptions. Our early-warning alert system monitors and predicts potential disruptions across suppliers, sites, and materials; our platform enables them to collaborate closely with their suppliers; our historical data-backed insights give them options on appropriate actions to take. Always innovating, our AI-powered predictive solutions can predict delivery delays, price movements, and supply constraints for raw materials and commodities before they happen. Resilinc helps our customers protect revenue and turn supply chain risks into opportunities to gain a competitive advantage
