Internal Compliance

SISA Information Security Pvt Ltd; Bengaluru; On-site; INR 600,000 - 900,000; Full time

Job summary

Sisainfosec in Bengaluru, India, is seeking a motivated Internal Compliance professional to support information security, compliance, audits, and governance across products, infra, and operations. You will help implement ISO 27001, SOC 2, PCI DSS and coordinate with cross-functional teams to close gaps and prepare audit evidence.

Ideal candidates have 1–2 years in security/compliance roles, strong documentation skills, and the ability to manage multiple stakeholders and deadlines effectively.

Qualifications

• Bachelor's degree in Computer Science, Information Security, IT, or related field.
• 1-2 years of experience in Information Security, Compliance, Governance, Risk, or Audit.
• Basic understanding of ISO 27001, PCI DSS, SOC 2, cybersecurity frameworks, and security best practices.
• Good documentation, analytical, and communication skills.
• Proficiency in Microsoft Excel, Word, PowerPoint, and compliance tracking tools.
• Strong attention to detail and organizational skills.

Responsibilities

• Track and monitor compliance status across all SISA products, cloud infrastructure, internal systems, and business functions.
• Support implementation and maintenance of compliance programs such as ISO 27001, SOC 2, PCI DSS, and other applicable standards.
• Follow up with internal stakeholders to ensure timely closure of compliance gaps and audit findings.
• Maintain compliance dashboards, trackers, and status reports.
• Conduct security and compliance reviews of third-party vendors and service providers.
• Review vendor security questionnaires, certifications, and audit reports.
• Track vendor risks and remediation activities.
• Coordinate with procurement, legal, and technical teams during vendor onboarding and reviews.
• Coordinate and support customer audits, due diligence assessments, and compliance reviews.
• Respond to client security questionnaires and compliance-related information requests.
• Collect, review, and maintain audit evidences required for client assessments.
• Work closely with product, infrastructure, and engineering teams to address client compliance requirements.

Skills

Information Security

Compliance

Governance

Audit

Documentation

Stakeholder coordination

Attention to detail

Communication

Education

Bachelor's degree in Computer Science

Tools

Microsoft Excel

Microsoft Word

PowerPoint

Compliance tracking tools

Job description

We are looking for a highly motivated and detail-oriented Internal Compliance who is passionate about information security, compliance, audits, and governance. The candidate will support compliance activities across SISA products, infrastructure, and business operations, ensuring adherence to regulatory, contractual, and industry security requirements.

Key Responsibilities

Compliance Management

• Track and monitor compliance status across all SISA products, cloud infrastructure, internal systems, and business functions.
• Support implementation and maintenance of compliance programs such as ISO 27001, SOC 2, PCI DSS, and other applicable standards.
• Follow up with internal stakeholders to ensure timely closure of compliance gaps and audit findings.
• Maintain compliance dashboards, trackers, and status reports.

Vendor Security Assessments

• Conduct security and compliance reviews of third-party vendors and service providers.
• Review vendor security questionnaires, certifications, and audit reports.
• Track vendor risks and remediation activities.
• Coordinate with procurement, legal, and technical teams during vendor onboarding and reviews.
• Coordinate and support customer audits, due diligence assessments, and compliance reviews.
• Respond to client security questionnaires and compliance-related information requests.
• Collect, review, and maintain audit evidences required for client assessments.
• Work closely with product, infrastructure, and engineering teams to address client compliance requirements.

Documentation & Policy Management

• Create, review, and update policies, procedures, standards, guidelines, and compliance documentation.
• Maintain version control and document repositories.
• Ensure compliance documents remain current with changing regulatory and business requirements.
• Assist in developing audit-ready documentation and evidence repositories.

Risk & Governance Support

• Assist in compliance gap assessments and internal audits.
• Support risk assessments and compliance monitoring activities.
• Track corrective actions and ensure timely closure of observations.
• Support awareness sessions and compliance communications across the organization.

Required Skills & Qualifications

• Bachelor's degree in Computer Science, Information Security, IT, or a related field.
• 1-2 years of experience in Information Security, Compliance, Governance, Risk, or Audit functions.
• Basic understanding of ISO 27001, PCI DSS, SOC 2, cybersecurity frameworks, and security best practices.
• Good documentation, analytical, and communication skills.
• Proficiency in Microsoft Excel, Word, PowerPoint, and compliance tracking tools.
• Strong attention to detail and organizational skills.
• Ability to coordinate with multiple stakeholders and manage deadlines effectively.

Preferred Qualifications

• Knowledge of cloud platforms such as AWS or Azure.
• Exposure to security questionnaires, vendor risk assessments, and audit processes.
• Certifications such as ISO 27001 Foundation, Security+ will be an added advantage.

What We Are Looking For

• Passionate about compliance, governance, and information security.
• Eager to learn and grow in a fast-paced environment.
• Self-driven, proactive, and accountable.
• Strong follow-up skills and ownership mindset.
• Ability to work independently while collaborating with cross-functional teams.

Experience Range: 1-2 Years

Employment Type: Full-Time

This role is ideal for candidates looking to build a long-term career in Information Security Compliance, Governance, Risk Management, and Audits.