Risk & Compliance Intern

We are seeking a detail-oriented and motivated Compliance Intern to support our

compliance and information security initiatives. The ideal candidate has hands-on

experience supporting external audits for one or more ISO management system frameworks,

such as ISO/IEC 27001, ISO/IEC 42001, or ISO/IEC 27701. This role involves assisting with

compliance activities, maintaining documentation, coordinating with internal teams and

supporting ongoing compliance programs.

What You'll Do

• Support compliance initiatives related to ISO/IEC 27001, ISO/IEC 42001, ISO/IEC

  27701, and other applicable frameworks.

• Assist in planning, coordinating, and supporting external certification and surveillance

  audits.

• Gather, organize, and maintain audit evidence and compliance documentation.
• Track audit findings, observations, and remediation activities to ensure timely closure.
• Assist in creating training modules and awareness materials for topics related to ISO

  frameworks and organizational compliance requirements.

• Support internal compliance awareness sessions and training programs.
• Assist in reviewing, updating, and maintaining compliance policies, procedures,

  trackers, and process documentation.

• Coordinate with cross-functional teams to collect evidence and monitor compliance

  activities.

• Support internal compliance assessments, risk reviews, and documentation activities.
• Maintain accurate compliance records and contribute to continuous improvement

  initiatives.

• Assist with information security program activities, including support for SOC 2 Type II

  readiness, security control testing, and evidence collection.

• Support vendor and third-party security assessment processes, including distribution

  and review of security questionnaires.

• Assist with security awareness and training initiatives, including tracking completion

  rates and updating training content.

What You'll Bring

• Completed a Bachelor's or Master's degree
• Experience supporting external audits for at least one ISO framework, such as:
• ISO/IEC 27001 (Information Security Management)
• ISO/IEC 42001 (Artificial Intelligence Management)
• ISO/IEC 27701 (Privacy Information Management)
• Understanding of ISO standards, audit processes, and compliance documentation.
• Familiarity with documentation management and evidence collection for audits.
• Strong organizational skills and attention to detail.
• Excellent written and verbal communication skills.
• Ability to work independently while collaborating effectively with cross-functional

  teams.

• Basic understanding of information security principles, including access controls,

  vulnerability management, and incident response concepts.

• Familiarity with SOC 2 Type II criteria or willingness to learn.