Compliance Associate

BM Academy; Zone 7 Ambattur; On-site; INR 300,000 - 500,000; Full time

Job summary

BM Academy is seeking a detail-oriented Compliance & Documentation Executive to help maintain ISO 27001 ISMS and support SOC 2 readiness in a fast-growing startup.

This entry-level role welcomes graduates with exposure to accounting, compliance, audit, or technology, offering structured documentation, cross-functional coordination, and opportunities to learn information security governance.

Qualifications

• Graduate in any discipline with exposure to accounting, compliance, audit, or technology.

Responsibilities

• Maintain and update ISMS policies, procedures, registers, control matrices, and supporting records.
• Coordinate SOC 2 readiness activities, including evidence collection, control tracking, audit requests, and follow-ups.
• Manage document naming, approvals, version control, review dates, and secure storage.
• Work with IT, HR, Finance, Legal, and business teams to obtain accurate and timely compliance evidence.
• Maintain risk, incident, asset, vendor, access-review, training, and corrective-action trackers.
• Support internal audits, management reviews, awareness activities, and closure of findings.
• Prepare concise status updates, meeting notes, dashboards, and audit-ready documentation.
• Monitor assigned compliance actions and escape delays or documentation gaps.

Skills

Detail-oriented

Documentation

Cross-functional coordination

Written English

Attention to detail

Microsoft Office

Education

Graduate in any discipline

CA/CWA Inter beneficial

Tools

Microsoft Word

Microsoft Excel

PowerPoint

Job description

Compliance & Documentation Executive

Information Security Compliance | ISO 27001 | SOC 2

Role Summary

We are a growing 50-person startup seeking a detail-oriented Compliance & Documentation Executive to help maintain our newly certified ISO 27001 Information Security Management System (ISMS) and support SOC 2 audit readiness. This entry-level role suits a graduate with exposure to accounting, compliance, audit, or technology who enjoys structured documentation and cross-functional coordination.

Key Responsibilities

• Maintain and update ISMS policies, procedures, registers, control matrices, and supporting records.
• Coordinate SOC 2 readiness activities, including evidence collection, control tracking, audit requests, and follow-ups.
• Manage document naming, approvals, version control, review dates, and secure storage.
• Work with IT, HR, Finance, Legal, and business teams to obtain accurate and timely compliance evidence.
• Maintain risk, incident, asset, vendor, access-review, training, and corrective-action trackers.
• Support internal audits, management reviews, awareness activities, and closure of findings.
• Prepare concise status updates, meeting notes, dashboards, and audit-ready documentation.
• Monitor assigned compliance actions and escape delays or documentation gaps.

Qualifications & Skills

• Graduate in any discipline; accounting, commerce, business, compliance, information systems, or technology exposure or CA/CWA Inter is useful.
• At least 1 year of experience in compliance, audit support, documentation, accounting operations, quality, information security, or a related field.
• Ability to handle confidential information and coordinate effectively in a fast-paced startup environment.
• Exposure to or experience with Lean / Six Sigma methodologies.
• Experience creating and reviewing work instructions (WIs), standard operating procedures (SOPs), and process flowcharts for finance processes is desirable.
• Basic understanding of ISO 27001, SOC 2, risk, controls, or audit documentation; willingness to learn is essential.
• Strong written English, attention to detail, follow-through, and proficiency in Microsoft Word, Excel, and PowerPoint.

Preferred

• Exposure to ISO 27001:2022, SOC 2 Trust Services Criteria, internal audits, risk registers, vendor assessments, data privacy, or GRC/compliance tools. Relevant certifications or training are an advantage, not mandatory.