Associate - Governance, Risk & Compliance

About the role

BTVK Advisory is a leading advisory firm whose specialized professionals guide clients through an ever-changing business world, helping them win now and anticipate tomorrow. BTVK Advisory, and its affiliated entities, have operations in North America, South America, Europe, Asia, and Australia.

What you'll do

• Review vendor documentation, including SOC 2 Type II reports, security and privacy policies, architectural diagrams
• Coordinate with key stakeholders to ensure accurate and timely response to client due diligence requests, security questionnaires, RFP and client audit inquiries
• Maintain and update standard response libraries, supporting documentation, policies, certifications, and evidence used for client due diligence
• Assist with supporting legal in the review of contracts, master service agreements, vendor agreements, client agreements, data protection agreements, security addendum
• Identify contract language related to information security, privacy, audit rights, data protection, regulatory compliance, breach notification, subcontractors

What you need

• 2–5 yrs of experience
• Compliance
• Documentation
• ISO 27001
• SOX
• Internal audit
• Due diligence
• B.Tech or B.E. or B.Sc or BCA

Good to have

• CISA
• CISSP