About the role
- Track and monitor compliance status across all SISA products, cloud infrastructure, internal systems, and business functions.
- Support implementation and maintenance of compliance programs such as ISO 27001, SOC 2, PCI DSS, and other applicable standards.
- Follow up with internal stakeholders to ensure timely closure of compliance gaps and audit findings.
- Maintain compliance dashboards, trackers, and status reports.
- Conduct security and compliance reviews of third-party vendors and service providers.
- Review vendor security questionnaires, certifications, and audit reports.
- Track vendor risks and remediation activities.
- Coordinate with procurement, legal, and technical teams during vendor onboarding and reviews.
- Coordinate and support customer audits, due diligence assessments, and compliance reviews.
- Respond to client security questionnaires and compliance-related information requests.
- Collect, review, and maintain audit evidences required for client assessments.
- Work closely with product, infrastructure, and engineering teams to address client compliance requirements.
- Create, review, and update policies, procedures, standards, guidelines, and compliance documentation.
- Maintain version control and document repositories.
- Ensure compliance documents remain current with changing regulatory and business requirements.
- Assist in developing audit-ready documentation and evidence repositories.
- Assist in compliance gap assessments and internal audits.
- Support risk assessments and compliance monitoring activities.
- Track corrective actions and ensure timely closure of observations.
- Support awareness sessions and compliance communications across the organization.
- Bachelor's degree in Computer Science, Information Security, IT, or a related field.
- 1-2 years of experience in Information Security, Compliance, Governance, Risk, or Audit functions.
- Basic understanding of ISO 27001, PCI DSS, SOC 2, cybersecurity frameworks, and security best practices.
- Good documentation, analytical, and communication skills.
- Proficiency in Microsoft Excel, Word, PowerPoint, and compliance tracking tools.
- Strong attention to detail and organizational skills.
- Ability to coordinate with multiple stakeholders and manage deadlines effectively.
- Knowledge of cloud platforms such as AWS or Azure.
- Exposure to security questionnaires, vendor risk assessments, and audit processes.
- Certifications such as ISO 27001 Foundation, Security+ will be an added advantage.
- Passionate about compliance, governance, and information security.
- Eager to learn and grow in a fast-paced environment.
- Self-driven, proactive, and accountable.
- Strong follow-up skills and ownership mindset.
- Ability to work independently while collaborating with cross-functional teams.