IT Compliance

Key Responsibilities

• Support IT Governance and Data Governance teams in certification preparation and compliance monitoring (ISO 27001, ISO 27701, SOC 2 Type 2)
• Conduct internal compliance assessments and gap analysis against organizational standards
• Monitor and ensure compliance posture against ISO 27001, ISO 27701, and SOC 2 Type 2
• Support external audit preparation and evidence collection for ISO 27001, ISO 27701, and SOC 2 Type 2
• Track and follow up on audit findings and remediation actions
• Manage compliance reporting and dashboards
• Coordinate with CyberOps on security control evidence and testing
• Handle customer Third-Party Security Assessment (TPSA) responses
• Participate in customer security meetings and address security-related inquiries
• Support vendor and third-party risk assessments
• Assist with data privacy compliance activities (ISO 27701)
• Maintain compliance documentation and control libraries
• Collaborate with all IT teams on compliance requirements

Required Qualifications

• 3+ years in IT compliance, audit, or related roles
• Working knowledge of ISO 27001, ISO 27701, and SOC 2 Type 2 frameworks
• Experience with compliance assessments and evidence collection
• Experience responding to customer security questionnaires or Third-Party Security Assessments (TPSA)
• Strong documentation and analytical skills
• Good English communication skills (written and verbal) for customer-facing interactions
• Ability to coordinate across multiple teams and stakeholders