Risk & Compliance Intern
About the job
- Completed a Bachelor's or Master's degree.
- Experience supporting external audits for at least one ISO framework, such as ISO/IEC 27001, ISO/IEC 42001, or ISO/IEC 27701.
- Understanding of ISO standards, audit processes, and compliance documentation.
- Familiarity with documentation management and evidence collection for audits.
- Strong organizational skills and attention to detail.
- Excellent written and verbal communication skills.
- Ability to work independently while collaborating effectively with cross-functional teams.
- Basic understanding of information security principles, including access controls, vulnerability management, and incident response concepts.
- Familiarity with SOC 2 Type II criteria or willingness to learn.
- Exposure to internal audits, risk assessments, or compliance management.
- Familiarity with GRC concepts.
- Knowledge of additional security or privacy frameworks such as SOC 2, GDPR, or applicable regulatory standards.
- Proficiency with Microsoft Office or Google Workspace, particularly Excel, Word, and PowerPoint.
- One to two years of related experience in compliance activities or handling any ISO framework.
- Experience with vendor risk management or third-party security assessments.
- Exposure to contract management systems, legal operations workflows, or policy management tools.
- Support compliance initiatives related to ISO/IEC 27001, ISO/IEC 42001, ISO/IEC 27701, and other applicable frameworks.
- Assist in planning, coordinating, and supporting external certification and surveillance audits.
- Gather, organize, and maintain audit evidence and compliance documentation.
- Track audit findings, observations, and remediation activities to ensure timely closure.
- Assist in creating training modules and awareness materials for ISO frameworks and organizational compliance requirements.
- Support internal compliance awareness sessions and training programs.
- Assist in reviewing, updating, and maintaining compliance policies, procedures, trackers, and process documentation.
- Coordinate with cross-functional teams to collect evidence and monitor compliance activities.
- Support internal compliance assessments, risk reviews, and documentation activities.
- Maintain accurate compliance records and contribute to continuous improvement initiatives.
- Assist with information security program activities, including SOC 2 Type II readiness, security control testing, and evidence collection.
- Support vendor and third-party security assessment processes, including distributing and reviewing security questionnaires.
- Assist with security awareness and training initiatives, including tracking completion rates and updating training content.
About the company
Resilinc provides a cloud-based suite for supply chain risk management that helps manufacturers, retailers, and service providers anticipate, assess, and respond to disruptions across multi-tier supplier networks. It collects data from millions of news and social feeds in 100 languages using autonomous and human research to generate real-time disruption alerts, plus supplier assessments and a resiliency scorecard that rates suppliers on criteria like past disruptions, recovery time, performance, sustainability, financial health, business continuity, and cybersecurity. Clients access these insights through a tiered, subscription-based platform offering basic disruption alerts to in-depth data on suppliers and commodities. Resilinc differentiates itself through global data coverage, multi-source research, and structured risk metrics that translate complex events into actionable guidance, with the goal of helping customers maintain business continuity and resilience.
Company Size
201-500
Company Stage
Series B
Total Funding
$26M
Headquarters
Milpitas, California
Founded
2010
Get referred to Resilinc
See people who can refer or advise you
Simplify's Take
What believers are saying
- FedRAMP authorization on April 1, 2026 opens government and regulated-industry deals.
- ISO/IEC 42001 certification on March 25, 2026 strengthens enterprise trust in AI governance.
- Microsoft's Hannover Messe 2026 booth and Databricks partnership expand distribution and credibility.
What critics are saying
- SAP, Kinaxis, Everstream, Interos, and Prewave crowd the 2026 buyer shortlist.
- Microsoft and Databricks partnerships tighten platform dependence as channel leverage increases in 2026.
- If supplier-contributed data stagnates, Resilinc loses the network advantage that powers its product.
What makes Resilinc unique
- Resilinc pairs supplier-validated multi-tier mapping with 15-plus years of disruption intelligence.
- Its 2026 Gartner Leader ranking validates deep sub-tier visibility and agentic risk workflows.
- MCP and A2A support embeds Resilinc inside enterprise AI and procurement systems.
Help us improve and share your feedback! Did you find this helpful?
Benefits
- Remote Work Options
- Professional Development Budget