Risk & Compliance Intern

Job Summary

We are seeking a detail-oriented and motivated Compliance Intern to support our compliance and information security initiatives. The ideal candidate has hands-on experience supporting external audits for one or more ISO management system frameworks, such as ISO/IEC 27001, ISO/IEC 42001, or ISO/IEC 27701. This role involves assisting with compliance activities, maintaining documentation, coordinating with internal teams and supporting ongoing compliance programs.

What You'll Do

• Support compliance initiatives related to ISO/IEC 27001, ISO/IEC 42001, ISO/IEC 27701, and other applicable frameworks.
• Assist in planning, coordinating, and supporting external certification and surveillance audits.
• Gather, organize, and maintain audit evidence and compliance documentation.
• Track audit findings, observations, and remediation activities to ensure timely closure.
• Assist in creating training modules and awareness materials for topics related to ISO frameworks and organizational compliance requirements.
• Support internal compliance awareness sessions and training programs.
• Assist in reviewing, updating, and maintaining compliance policies, procedures, trackers, and process documentation.
• Coordinate with cross-functional teams to collect evidence and monitor compliance activities.
• Support internal compliance assessments, risk reviews, and documentation activities.
• Maintain accurate compliance records and contribute to continuous improvement initiatives.
• Assist with information security program activities, including support for SOC 2 Type II readiness, security control testing, and evidence collection.
• Support vendor and third-party security assessment processes, including distribution and review of security questionnaires.
• Assist with security awareness and training initiatives, including tracking completion rates and updating training content.

What You'll Bring

• Completed a Bachelors or Masters degree
• Experience supporting external audits for at least one ISO framework, such as:
• ISO/IEC 27001 (Information Security Management)
• ISO/IEC 42001 (Artificial Intelligence Management)
• ISO/IEC 27701 (Privacy Information Management)
• Understanding of ISO standards, audit processes, and compliance documentation.
• Familiarity with documentation management and evidence collection for audits.
• Strong organizational skills and attention to detail.
• Excellent written and verbal communication skills.
• Ability to work independently while collaborating effectively with cross-functional teams.
• Basic understanding of information security principles, including access controls, vulnerability management, and incident response concepts.
• Familiarity with SOC 2 Type II criteria or willingness to learn.
• Exposure to internal audits, risk assessments, or compliance management.
• Familiarity with GRC concepts.
• Knowledge of additional security or privacy frameworks such as SOC 2, GDPR, or applicable regulatory standards.
• Proficiency with Microsoft Office or Google Workspace, particularly Excel, Word, and PowerPoint.
• 1-2 years of related experience in compliance activities or handling any ISO framework.
• Experience with vendor risk management or third-party security assessments.
• Exposure to contract management systems, legal operations workflows, or policy management tools.

Working Hours

• Part-time internship (Remote working)
• Approximately 20 hours per week (India time zone)
• Flexible work schedule based on team requirements

Disclaimer: This job posting and Location has been aggregated from external source. Role details, content, and availability are subject to change. Applicants are advised to confirm the latest information directly on the company website before applying.