Information Security GRC Intern

Responsibilities and Duties:

• Governance & Compliance Support: Assist in reviewing and updating security controls and documentation aligned with key security and compliance frameworks.

• Risk Assessments: Assist with control gap assessments and documenting mitigation strategies.

• Audit & Certification Readiness: Help prepare for security audits by collecting evidence to ensure compliance with industry standards.

• Security Policies & Documentation: Assist in maintaining GRC documentation, including security policies and standards.

• Third-Party Risk Management: Support vendor security risk assessments to ensure third-party compliance with company security standards.

• Reporting: Assist the team in building and maintaining metrics dashboards and reports.

• Collaboration: Work with various business units to ensure controls are adequate, appropriate, and effective.

Qualifications:

• Student enrolled in an accredited university working towards a degree in Information Technology, GRC preferred.

• Foundational understanding of information security controls, compliance, and audits.

• Very strong written communication skills.

• Excellent collaboration and communication skills, with the ability to work with stakeholders across the company.

• Attention to detail.

• Able to manage multiple concurrent projects.

• Proactive and curious mindset, with a willingness to experiment and learn.

• Able to work for the complete summer break (May - August or June - September).