Internal Compliance Professional

Sisa Information Security; Bengaluru; On-site; INR 600,000 - 1,000,000; Full time

Job summary

Sisa Information Security in Bengaluru is seeking an Internal Compliance professional to support compliance programs across products, infrastructure, and operations. The role focuses on ISO 27001, SOC 2, PCI DSS and other standards, working with cross-functional teams to close gaps and compile audit evidence.

Responsibilities include maintaining dashboards, conducting vendor assessments, supporting client audits, and updating policies.

Qualifications

• Bachelor's degree in Computer Science, Information Security, IT, or a related field.
• 1-2 years of experience in Information Security, Compliance, Governance, Risk, or Audit functions.
• Basic understanding of ISO 27001, PCI DSS, SOC 2, cybersecurity frameworks, and security best practices.
• Good documentation, analytical, and communication skills.
• Proficiency in Microsoft Excel, Word, PowerPoint, and compliance tracking tools.
• Strong attention to detail and organizational skills.
• Ability to coordinate with multiple stakeholders and manage deadlines effectively.

Responsibilities

• Track and monitor compliance status across products, cloud infrastructure, internal systems, and business functions.
• Support implementation and maintenance of compliance programs such as ISO 27001, SOC 2, PCI DSS, and other applicable standards.
• Follow up with internal stakeholders to ensure timely closure of compliance gaps and audit findings.
• Maintain compliance dashboards, trackers, and status reports.
• Conduct security and compliance reviews of third-party vendors and service providers.
• Review vendor security questionnaires, certifications, and audit reports.
• Track vendor risks and remediation activities.
• Coordinate with procurement, legal, and technical teams during vendor onboarding and reviews.
• Coordinate and support customer audits, due diligence assessments, and compliance reviews.
• Respond to client security questionnaires and compliance-related information requests.
• Collect, review, and maintain audit evidences required for client assessments.
• Work closely with product, infrastructure, and engineering teams to address client compliance requirements.
• Create, review, and update policies, procedures, standards, guidelines, and compliance documentation.
• Maintain version control and document repositories.
• Ensure compliance documents remain current with changing regulatory and business requirements.
• Assist in developing audit-ready documentation and evidence repositories.
• Assist in compliance gap assessments and internal audits.
• Support risk assessments and compliance monitoring activities.
• Track corrective actions and ensure timely closure of observations.
• Support awareness sessions and compliance communications across the organization.

Skills

Compliance management

Audit coordination

Documentation

Stakeholder coordination

Analytical thinking

Communication skills

Education

Bachelor's degree in Computer Science, Information Security, IT, or related field

Tools

Excel

Word

PowerPoint

Compliance tracking tools

Job description

About the Role

We are looking for a highly motivated and detail-oriented Internal Compliance who is passionate about information security, compliance, audits, and governance. The candidate will support compliance activities across SISA products, infrastructure, and business operations, ensuring adherence to regulatory, contractual, and industry security requirements.

Key Responsibilities

Compliance Management

• Track and monitor compliance status across all SISA products, cloud infrastructure, internal systems, and business functions.
• Support implementation and maintenance of compliance programs such as ISO 27001, SOC 2, PCI DSS, and other applicable standards.
• Follow up with internal stakeholders to ensure timely closure of compliance gaps and audit findings.
• Maintain compliance dashboards, trackers, and status reports.

Vendor Security Assessments

• Conduct security and compliance reviews of third-party vendors and service providers.
• Review vendor security questionnaires, certifications, and audit reports.
• Track vendor risks and remediation activities.
• Coordinate with procurement, legal, and technical teams during vendor onboarding and reviews.

Client Audits & Security Questionnaires

• Coordinate and support customer audits, due diligence assessments, and compliance reviews.
• Respond to client security questionnaires and compliance-related information requests.
• Collect, review, and maintain audit evidences required for client assessments.
• Work closely with product, infrastructure, and engineering teams to address client compliance requirements.

Documentation & Policy Management

• Create, review, and update policies, procedures, standards, guidelines, and compliance documentation.
• Maintain version control and document repositories.
• Ensure compliance documents remain current with changing regulatory and business requirements.
• Assist in developing audit-ready documentation and evidence repositories.

Risk & Governance Support

• Assist in compliance gap assessments and internal audits.
• Support risk assessments and compliance monitoring activities.
• Track corrective actions and ensure timely closure of observations.
• Support awareness sessions and compliance communications across the organization.

Required Skills & Qualifications

• Bachelors degree in Computer Science, Information Security, IT, or a related field.
• 1-2 years of experience in Information Security, Compliance, Governance, Risk, or Audit functions.
• Basic understanding of ISO 27001, PCI DSS, SOC 2, cybersecurity frameworks, and security best practices.
• Good documentation, analytical, and communication skills.
• Proficiency in Microsoft Excel, Word, PowerPoint, and compliance tracking tools.
• Strong attention to detail and organizational skills.
• Ability to coordinate with multiple stakeholders and manage deadlines effectively.

Preferred Qualifications

• Knowledge of cloud platforms such as AWS or Azure.
• Exposure to security questionnaires, vendor risk assessments, and audit processes.
• Certifications such as ISO 27001 Foundation, Security+ will be an added advantage.

What We Are Looking For

• Passionate about compliance, governance, and information security.
• Eager to learn and grow in a fast-paced environment.
• Self-driven, proactive, and accountable.
• Strong follow-up skills and ownership mindset.
• Ability to work independently while collaborating with cross-functional teams.