Compliance Implementation Associate

About the role

The Compliance Implementation Associate supports the day-to-day execution of compliance, audit, risk governance, regulatory documentation, and Integrated Management System activities. The role helps maintain audit readiness and supports the implementation of controls aligned with ISO 27001, PCI DSS 4.0, HIPAA/HITRUST and SOC 2 Type II. Working under the guidance of the Compliance Implementation Senior Team Lead, the Associate coordinates with process owners and cross-functional stakeholders, maintains accurate evidence and records, tracks compliance and risk actions, and escalates gaps or delays.

Key responsibilities

• Support internal and external compliance audits covering ISO 27001, ISO 22301, PCI DSS 4.0, SOC 2 Type II, and applicable internal requirements
• Collect, organize, validate, and maintain audit evidence in coordination with control owners and relevant departments
• Perform scheduled compliance checks using approved procedures, checklists, and control requirements
• Document observations, audit findings, and potential control gaps accurately and escalate them to the Senior Team Lead
• Track corrective actions and follow up with assigned owners to support timely closure
• Maintain complete, accurate, and current records of compliance activities, requests, assessments, and supporting evidence
• Prepare status reports, trackers, and supporting materials for audits, management reviews, and compliance meetings
• Assist in drafting, reviewing, formatting, publishing, and updating compliance policies, procedures, and related guidance
• Support risk assessment activities for new-client onboarding in coordination with Client Services and relevant departments
• Coordinate with departments and control owners to obtain required information, evidence, approvals, and action updates

About you

• Bachelor's degree in Industrial Engineering, Computer Engineering, Information Technology, Business Administration, Accounting, or a related field; equivalent relevant experience may be considered
• One to two years of experience in compliance, internal audit, information security, risk management, quality management, document control, or a related function is preferred
• Exposure to audit preparation, evidence collection, policy administration, risk registers, or corrective-action tracking is preferred
• Familiarity with one or more of the following is an advantage: ISO 27001, PCI DSS 4.0, SOC 2 Type II, HIPAA/HITRUST or an Integrated Management System
• Basic understanding of compliance, audit, risk management, information security, or quality management principles
• Strong attention to detail and the ability to maintain accurate, well-organized records and evidence
• Effective written and verbal communication skills, including the ability to follow up professionally with stakeholders
• Analytical and problem-solving skills, with the judgement to recognize and escalate potential compliance risks
• Ability to manage multiple tasks, meet deadlines, and work effectively with limited supervision after receiving guidance
• Proficiency in Microsoft Office or comparable productivity tools; experience with document repositories, ticketing systems, or governance, risk, and compliance tools is an advantage