The Compliance Analyst will support consulting engagements involving ISO 27001 implementation, SOC 2 readiness, compliance assessments, documentation, audit support, and implementation activities.
This role is ideal for candidates with 1–2 years of experience who have participated in at least one ISO/IEC 27001:2022 implementation project and have basic exposure to SOC 2 Type II.
Key Responsibilities:
ISO 27001 Implementation
- Support ISO/IEC 27001:2022 implementation projects
- Assist in gap assessments
- Help implement Annex A controls
- Support risk assessment activities
- Assist in Statement of Applicability (SoA) preparation
- Support certification readiness
Documentation:
Assist in preparing and maintaining Information Security Policies, Procedures, Risk Register, Asset Register, Risk Treatment Plan, Control Documentation, Compliance Reports, Develop, review, and maintain Information Security manual, Statement of Applicability (SoA), Privacy Documentation, and AI Governance Documentation.
Audit Support:Support internal and external audits by:
- Collecting evidence
- Reviewing control implementation
- Coordinating with client stakeholders
- Preparing audit documentation
- Tracking corrective actions
- Maintaining compliance documentation
SOC 2 Support: Assist in:
- SOC 2 readiness assessments
- Evidence collection
- Control mapping
- Documentation reviews
- Audit preparation
Client Engagement:
- Participate in client meetings
- Assist during workshops
- Conduct documentation reviews
- Track project deliverables and timelines
- Support implementation projects
Continuous Compliance:Assist clients in establishing continuous compliance programs through:
- Compliance monitoring
- Control reviews
- Policy reviews
- Internal audit support
- Awareness initiatives
Required Skills & Experience:
- 2–3 years of experience in Information Security Compliance, GRC, Risk Management, or Privacy.
Technical Knowledge:Working knowledge of at least 3 out of this list:
- ISO/IEC 27001:2022
- ISO/IEC 27701 (PIMS)
- SOC 2 Type II
- GDPR
- ISO/IEC 42001
- Risk Assessment methodologies
- Security Controls
- Information Security Governance
- Privacy Principles
Documentation Skills:
Experience creating and reviewing Policies, Procedures, Control Documentation, Compliance Reports, Audit Evidence, Risk Registers, Compliance Matrices
Soft Skills:
Idea candidate should posses Excellent English written and verbal communication, Strong analytical thinking, High attention to detail, Ability to manage multiple client engagements, Self-driven with excellent time management, and Comfortable working remotely,
Preferred Qualifications:
At least two certifications are mandatory:
- ISO/IEC 27001 Lead Implementer
- ISO/IEC 27001 Lead Auditor
- ISO/IEC 27701 Lead Implementer
- ISO/IEC 42001 Lead Implementer
- ISO/IEC 42001 Lead Auditor
- Certified Information Privacy Professional (CIPP)
- Certified Information Privacy Manager (CIPM)
- Certified Information Systems Auditor (CISA)
- Certified Information Security Manager (CISM)
- Any recognized GRC or cybersecurity certification