Risk & Compliance Intern

What You'll Do

• Support compliance initiatives related to ISO/IEC 27001, ISO/IEC 42001, ISO/IEC 
  27701, and other applicable frameworks.
• Assist in planning, coordinating, and supporting external certification and surveillance 
  audits.
• Gather, organize, and maintain audit evidence and compliance documentation.
• Track audit findings, observations, and remediation activities to ensure timely closure.
• Assist in creating training modules and awareness materials for topics related to ISO 
  frameworks and organizational compliance requirements.
• Support internal compliance awareness sessions and training programs.
• Assist in reviewing, updating, and maintaining compliance policies, procedures, 
  trackers, and process documentation.
• Coordinate with cross-functional teams to collect evidence and monitor compliance 
  activities.
• Support internal compliance assessments, risk reviews, and documentation activities.
• Maintain accurate compliance records and contribute to continuous improvement 
  initiatives.
• Assist with information security program activities, including support for SOC 2 Type II 
  readiness, security control testing, and evidence collection.
• Support vendor and third-party security assessment processes, including distribution 
  and review of security questionnaires.
• Assist with security awareness and training initiatives, including tracking completion 
  rates and updating training content.

What You'll Bring

• Completed a Bachelor's or Master's degree
• Experience supporting external audits for at least one ISO framework, such as:
• ISO/IEC 27001 (Information Security Management)
• ISO/IEC 42001 (Artificial Intelligence Management)
• ISO/IEC 27701 (Privacy Information Management)
• Understanding of ISO standards, audit processes, and compliance documentation.
• Familiarity with documentation management and evidence collection for audits.
• Strong organizational skills and attention to detail.
• Excellent written and verbal communication skills.
• Ability to work independently while collaborating effectively with cross-functional 
  teams.
• Basic understanding of information security principles, including access controls, 
  vulnerability management, and incident response concepts.
• Familiarity with SOC 2 Type II criteria or willingness to learn.

• Exposure to internal audits, risk assessments, or compliance management.
• Familiarity with GRC concepts.
• Knowledge of additional security or privacy frameworks such as SOC 2, GDPR, or 
  applicable regulatory standards.
• Proficiency with Microsoft Office or Google Workspace, particularly Excel, Word, and 
  PowerPoint.
• 1-2 years of related experience in compliance activities or handling any ISO framework. 
• Experience with vendor risk management or third-party security assessments.
• Exposure to contract management systems, legal operations workflows, or policy 
  management tools.
Working Hours
• Part-time internship (Remote working)
• Approximately 20 hours per week (India time zone)
• Flexible work schedule based on team requirements