Compliance Analyst

Nextbridge Global; Lahore; On-site; PKR 600,000 - 1,200,000; Full time

Job summary

Nextbridge Global is seeking a Compliance Analyst to support internal audits, compliance activities, evidence reviews, and continuous improvement within a software organization.

The role involves planning and conducting audits against ISO 27001:2022 and ISO 9001:2015, reviewing documentation, identifying nonconformities, and maintaining audit records to support external certification processes.

Qualifications

• Bachelor's degree in IT, Computer Science, Software Engineering, or related field.
• 1–2 years of experience in ISO, internal audits, compliance or information security.
• Working knowledge of ISO 27001:2022 and ISO 9001:2015.
• Informal audits related to organizational infrastructure
• Basic understanding of information security, risk management, and software/IT processes.
• Good analytical, documentation, communication, and interpersonal skills.
• SOC2 knowledge is plus

Responsibilities

• Plan and conduct internal audits against ISO 27001:2022 and ISO 9001:2015.
• Review policies, procedures, records and audit evidence for compliance.
• Identify nonconformities, observations and improvement opportunities.
• Follow up on corrective actions and verify implementation.
• Support risk assessments, compliance tracking and management reviews.
• Assist in preparing evidence for external certification audits.
• Audit software development, SQA, IT, HR, operations and other processes.
• Maintain audit reports, checklists and compliance documentation.

Skills

Analytical thinking

Documentation

Communication

Interpersonal skills

SOC2 knowledge

Education

Bachelor's degree in IT/CS/SE

Tools

ISO 27001

ISO 9001

Audit management

Job description

Job Description:

Job Summary

We are seeking a Compliance Analyst to support internal audits, compliance activities, evidence reviews, and continuous improvement within a software organization.

Key Responsibilities

• Assist in planning and conducting internal audits against ISO 27001:2022 and ISO 9001:2015.
• Review policies, procedures, records, and audit evidence for compliance.
• Identify and document nonconformities, observations, and improvement opportunities.
• Follow up on corrective actions and verify their implementation.
• Support risk assessments, compliance tracking, and management reviews.
• Assist departments in preparing evidence for external certification/surveillance audits.
• Conduct audits of software development, SQA, IT, HR, Operations, and other business processes.
• Maintain audit reports, checklists, and compliance documentation.

Requirements

• Bachelor's degree in IT, Computer Science, Software Engineering, or a related field.
• 1–2 years of experience in ISO, internal audits, compliance or information security.
• Working knowledge of ISO 27001:2022 and ISO 9001:2015.
• Informal audits related to organizational infrastructure
• Basic understanding of information security, risk management, and software/IT processes.
• Good analytical, documentation, communication, and interpersonal skills.
• SOC2 knowledge is plus