Compliance & Documentation Executive

Information Security Compliance | ISO 27001 | SOC 2

Role Summary

We are a growing 50-person startup seeking a detail-oriented Compliance &

Documentation Executive to help maintain our newly certified ISO 27001 Information

Security Management System (ISMS) and support SOC 2 audit readiness. This entry-level role suits a graduate with exposure to accounting, compliance, audit, or technology who enjoys structured documentation and cross-functional coordination.

Key Responsibilities

- Maintain and update ISMS policies, procedures, registers, control matrices, and supporting records.
- Coordinate SOC 2 readiness activities, including evidence collection, control tracking, audit requests, and follow-ups.
- Manage document naming, approvals, version control, review dates, and secure storage.
- Work with IT, HR, Finance, Legal, and business teams to obtain accurate and timely compliance evidence.
- Maintain risk, incident, asset, vendor, access-review, training, and corrective-action trackers.
- Support internal audits, management reviews, awareness activities, and closure of findings.
- Prepare concise status updates, meeting notes, dashboards, and audit-ready documentation.




- Monitor assigned compliance actions and escalate delays or documentation gaps.

Qualifications & Skills
- Graduate in any discipline; accounting, commerce, business, compliance,

information systems, or technology exposure or CA/CWA Inter is useful.
- At least 1 year of experience in compliance, audit support, documentation,

accounting operations, quality, information security, or a related field.
- Ability to handle confidential information and coordinate effectively in a fast-paced startup workplace.
- Exposure to or experience with Lean / Six Sigma methodologies.
- Experience creating and reviewing work instructions (WIs), standard operating procedures (SOPs), and process flowcharts for finance processes is desirable.
- Basic understanding of ISO 27001, SOC 2, risk, controls, or audit documentation;

willingness to learn is essential.
- Strong written English, attention to detail, follow-through, and proficiency in Microsoft

Word, Excel, and PowerPoint.

Preferred

Exposure to ISO 27001:2022, SOC 2 Trust Services Criteria, internal audits, risk registers,

vendor assessments, data privacy, or GRC/compliance tools. Relevant certifications or training are an advantage, not mandatory.

📌 Compliance Associate (Chennai)
🏢 BM Academy
📍 Chennai