Risk & Compliance Administrator

About Sand 

Sand is a global Physical AI company using data and AI to make critical industries work better. We partner with governments, cities and enterprises to improve how essential systems operate across healthcare, water, energy, telecommunications and infrastructure.

Our work delivers proven real-world impact. We have built AI systems that help manage London’s water supply, supported telecom network planning across hundreds of cities, and developed digital healthcare platforms serving tens of millions of people. From intelligent command centers to AI-powered infrastructure platforms, we help organizations sense, analyze and act in complex environments.

Our people are ambitious, curious and relentlessly practical. Our teams work alongside clients in the field, solving hard problems and deploying solutions that last. With colleagues across Africa, Europe, the UK and the US, we operate across the full stack - from research and engineering to deployment and capability building.

Our mission is simple: to harness AI to solve humanity’s most pressing challenges.

About the Role

SAND is seeking an organized, detail-driven Risk & Compliance Administrator to join our team. In this role, you will serve as the operational backbone of the Risk & Compliance function, helping ensure our organization continuously meets regulatory obligations, industry standards, and internal governance frameworks.

Working closely with the Risk & Compliance Director, you will assist in tracking risk mitigation efforts, maintaining audit readiness across key frameworks (such as ISO 27001, SOC 2, and Cyber Essentials), and fostering a strong culture of compliance across all departments. This is an ideal position for a proactive administrative professional looking to build a career in enterprise risk and governance within a fast-paced environment.

Specific Responsibilities

• Compliance & Audit Coordination

  • Framework Support: Assist in monitoring ongoing compliance with core industry standards (e.g., ISO 27001, SOC 2, Cyber Essentials).
  • Audit Readiness: Coordinate audit preparation by collecting documentation, organizing evidence repositories, and tracking audit action items.
  • Compliance Calendar: Maintain a centralized compliance calendar to track recurring filings, policy review cycles, and regulatory deadlines.

  Risk Governance & Incident Tracking

  • Risk Register Maintenance: Assist in updating the central Risk Register, tracking risk owners, and monitoring remediation progress across departments.
  • Incident Logging: Log compliance incidents, policy breaches, and near-misses; track follow-up corrective actions to ensure timely resolution.
  • Risk Reporting: Help gather data and draft routine risk and compliance dashboards for management review.

  Policy & Training Administration

  • Policy Management: Support the drafting, version control, and distribution of updated internal policies and standard operating procedures (SOPs).
  • Awareness & Training: Assist in building and deploying compliance training materials; track employee completion rates and assist with onboarding security training.

  Operational Support

  • Provide administrative support to the Risk & Compliance team, including meeting coordination, agenda preparation, and tracking department action items.
  • Serve as an accessible first point of contact for internal inquiries regarding compliance documentation and procedures.

Skill Requirements - Essential

• Required:

  • Experience: 1–2 years of experience in an administrative, compliance support, operational risk, or audit-adjacent role.
  • Education: Bachelor’s degree in Business Administration, Law, Information Technology, Finance, or equivalent practical experience.
  • Technical Proficiency: High familiarity with modern workspace tools (e.g., Google Workspace / Microsoft 365, Slack, Jira/Confluence, or Notion).
  • Key Competencies:
  • High attention to detail and rigorous organizational skills.
  • Strong written and verbal communication skills.
  • Discretion and integrity when handling confidential or sensitive organizational data.

  Preferred:

  • Basic familiarity with information security frameworks (ISO 27001, SOC 2) or data privacy regulations (e.g., GDPR, POPIA).
  • Prior experience working in a fully remote team environment.
  • Exposure to Governance, Risk, and Compliance (GRC) software or ticketing tools.

 

Work Environment

Due to the considerable amount of virtual working and interaction with colleagues and customers in different physical locations internationally, it is essential that the successful applicant has the drive and ethic to succeed working in small teams physically but in larger efforts virtually. Self-drive to communicate constantly using web collaboration and video conferencing is essential. As an employee, you will be encouraged to continually develop your capability & attain certifications to reflect your growth as an individual.