Risk And Compliance Analyst

Job highlights

• Graduate with 1+ year in compliance, audit support, or information security; knowledge of ISO 27001, SOC 2, and Lean/Six Sigma
• Maintain ISMS documentation, coordinate SOC 2 readiness, manage compliance trackers, support audits, and prepare audit-ready reports

Compliance & Documentation Executive

Information Security Compliance | ISO 27001 | SOC 2

Role Summary

We are a growing 50-person startup seeking a detail-oriented Compliance & Documentation Executive to help maintain our newly certified ISO 27001 Information Security Management System (ISMS) and support SOC 2 audit readiness. This entry-level role suits a graduate with exposure to accounting, compliance, audit, or technology who enjoys structured documentation and cross-functional coordination.

Key Responsibilities

• Maintain and update ISMS policies, procedures, registers, control matrices, and supporting records.

• Coordinate SOC 2 readiness activities, including evidence collection, control tracking, audit requests, and follow-ups.

• Manage document naming, approvals, version control, review dates, and secure storage.

• Work with IT, HR, Finance, Legal, and business teams to obtain accurate and timely compliance evidence.

• Maintain risk, incident, asset, vendor, access-review, training, and corrective-action trackers.

• Support internal audits, management reviews, awareness activities, and closure of findings.

• Prepare concise status updates, meeting notes, dashboards, and audit-ready documentation.

• Monitor assigned compliance actions and escalate delays or documentation gaps.

Qualifications & Skills

• Graduate in any discipline; accounting, commerce, business, compliance, information systems, or technology exposure or CA/CWA Inter is useful.

• At least 1 year of experience in compliance, audit support, documentation, accounting operations, quality, information security, or a related field.

• Ability to handle confidential information and coordinate effectively in a fast-paced startup environment.

• Exposure to or experience with Lean / Six Sigma methodologies.

• Experience creating and reviewing work instructions (WIs), standard operating procedures (SOPs), and process flowcharts for finance processes is desirable.

• Basic understanding of ISO 27001, SOC 2, risk, controls, or audit documentation; willingness to learn is essential.

• Strong written English, attention to detail, follow-through, and proficiency in Microsoft Word, Excel, and PowerPoint.

Preferred

Exposure to ISO 27001:2022, SOC 2 Trust Services Criteria, internal audits, risk registers, vendor assessments, data privacy, or GRC/compliance tools. Relevant certifications or training are an advantage, not mandatory.