Compliance & Documentation Executive

Information Security Compliance | ISO 27001 | SOC 2

Role Summary

We are a growing 50-person startup seeking a detail-oriented Compliance &

Documentation Executive to help maintain our newly certified ISO 27001 Information

Security Management System (ISMS) and support SOC 2 audit readiness. This entry-level role suits a graduate with exposure to accounting, compliance, audit, or technology who enjoys structured documentation and cross-functional coordination.

Key Responsibilities
Maintain and update ISMS policies, procedures, registers, control matrices, and supporting records.
Coordinate SOC 2 readiness activities, including evidence collection, control tracking, audit requests, and follow-ups.
Manage document naming, approvals, version control, review dates, and secure storage.
Work with IT, HR, Finance, Legal, and business teams to obtain accurate and timely compliance evidence.
Maintain risk, incident, asset, vendor, access-review, training, and corrective-action trackers.
Support internal audits, management reviews, awareness activities, and closure of findings.
Prepare concise status updates, meeting notes, dashboards, and audit-ready documentation.




Monitor assigned compliance actions and escalate delays or documentation gaps.

Qualifications & Skills
Graduate in any discipline; accounting, commerce, business, compliance,

information systems, or technology exposure or CA/CWA Inter is practical.
At least 1 year of experience in compliance, audit support, documentation,

accounting operations, quality, information security, or a related field.
Ability to handle confidential information and coordinate effectively in a fast-paced startup workplace.
Exposure to or experience with Lean / Six Sigma methodologies.
Experience creating and reviewing work instructions (WIs), standard operating procedures (SOPs), and process flowcharts for finance processes is desirable.
Basic understanding of ISO 27001, SOC 2, risk, controls, or audit documentation;

willingness to learn is essential.
Solid written English, attention to detail, follow-through, and proficiency in Microsoft

Word, Excel, and PowerPoint.

Preferred

Exposure to ISO 27001:2022, SOC 2 Trust Services Criteria, internal audits, risk registers,

vendor assessments, data privacy, or GRC/compliance tools. Relevant certifications or training are an advantage, not mandatory.

📌 Compliance Associate Chennai
🏢 BM Academy
📍 Chennai