Internal Compliance

About the Role

Key Responsibilities

• Track and monitor compliance status across all SISA products, cloud infrastructure, internal systems, and business functions.
• Support implementation and maintenance of compliance programs such as ISO 27001, SOC 2, PCI DSS,  and other applicable standards.
• Follow up with internal stakeholders to ensure timely closure of compliance gaps and audit findings.
• Maintain compliance dashboards, trackers, and status reports.

• Conduct security and compliance reviews of third-party vendors and service providers.
• Review vendor security questionnaires, certifications, and audit reports.
• Track vendor risks and remediation activities.
• Coordinate with procurement, legal, and technical teams during vendor onboarding and reviews.

• Coordinate and support customer audits, due diligence assessments, and compliance reviews.
• Respond to client security questionnaires and compliance-related information requests.
• Collect, review, and maintain audit evidences required for client assessments.
• Work closely with product, infrastructure, and engineering teams to address client compliance requirements.

• Create, review, and update policies, procedures, standards, guidelines, and compliance documentation.
• Maintain version control and document repositories.
• Ensure compliance documents remain current with changing regulatory and business requirements.
• Assist in developing audit-ready documentation and evidence repositories.

• Assist in compliance gap assessments and internal audits.
• Support risk assessments and compliance monitoring activities.
• Track corrective actions and ensure timely closure of observations.
• Support awareness sessions and compliance communications across the organization.

Required Skills & Qualifications

• Bachelor's degree in Computer Science, Information Security, IT, or a related field.
• 1-2 years of experience in Information Security, Compliance, Governance, Risk, or Audit functions.
• Basic understanding of ISO 27001, PCI DSS, SOC 2, cybersecurity frameworks, and security best practices.
• Good documentation, analytical, and communication skills.
• Proficiency in Microsoft Excel, Word, PowerPoint, and compliance tracking tools.
• Strong attention to detail and organizational skills.
• Ability to coordinate with multiple stakeholders and manage deadlines effectively.

Preferred Qualifications

• Knowledge of cloud platforms such as AWS or Azure.
• Exposure to security questionnaires, vendor risk assessments, and audit processes.
• Certifications such as ISO 27001 Foundation, Security+ will be an added advantage.

What We Are Looking For

• Passionate about compliance, governance, and information security.
• Eager to learn and grow in a fast-paced environment.
• Self-driven, proactive, and accountable.
• Strong follow-up skills and ownership mindset.
• Ability to work independently while collaborating with cross-functional teams.