Risk & Compliance Intern

What You'll Do

• Support compliance initiatives related to ISO/IEC 27001, ISO/IEC 42001, ISO/IEC 27701, and other applicable frameworks.
• Assist in planning, coordinating, and supporting external certification and surveillance audits.
• Gather, organize, and maintain audit evidence and compliance documentation.
• Track audit findings, observations, and remediation activities to ensure timely closure.
• Assist in creating training modules and awareness materials for topics related to ISO frameworks and organizational compliance requirements.
• Support internal compliance awareness sessions and training programs.
• Assist in reviewing, updating, and maintaining compliance policies, procedures, trackers, and process documentation.
• Coordinate with cross-functional teams to collect evidence and monitor compliance activities.
• Support internal compliance assessments, risk reviews, and documentation activities.
• Maintain accurate compliance records and contribute to continuous improvement initiatives.
• Assist with information security program activities, including support for SOC 2 Type II readiness, security control testing, and evidence collection.
• Support vendor and third-party security assessment processes, including distribution and review of security questionnaires.
• Assist with security awareness and training initiatives, including tracking completion rates and updating training content.

What You'll Bring

• Completed a Bachelor's or Master's degree
• Experience supporting external audits for at least one ISO framework, such as:
  • ISO/IEC 27001 (Information Security Management)
  • ISO/IEC 42001 (Artificial Intelligence Management)
  • ISO/IEC 27701 (Privacy Information Management)
• Understanding of ISO standards, audit processes, and compliance documentation.
• Familiarity with documentation management and evidence collection for audits.
• Strong organizational skills and attention to detail.
• Excellent written and verbal communication skills.
• Ability to work independently while collaborating effectively with cross-functional teams.
• Basic understanding of information security principles, including access controls, vulnerability management, and incident response concepts.
• Familiarity with SOC 2 Type II criteria or willingness to learn.

Working Hours

• Part-time internship (Remote working)
• Approximately 20 hours per week (India time zone)
• Flexible work schedule based on team requirements