IT Security GRC Intern

IT Security GRC Intern

The Security GRC Intern will support the Governance, Risk, and Compliance team in areas including Vendor Risk Management, SOX IT General Controls, PCI Compliance, Data Governance, AI Risk Activities, Policy & Standards Management, and Enterprise Security Awareness Training. These GRC activities are ideal for a student who is respectful, eager to learn, curious, has a heart for the customer, enjoys working with people, and takes pride in the quality of their work.

The intern will gain hands‑on experience in real‑world information security processes, documentation, assessments, and compliance activities, and will work closely with team members across IT, procurement, operations, and security.

Essential Duties And Responsibilities

• Assist in providing positive, peoplefocused support and demonstrate strong customer service skills when interacting with team members and partners.
• Assist with Vendor Risk Management activities, including gathering information, organizing documentation, and supporting basic review tasks.
• Participate in light SOX IT General Controls activities, such as observing control walkthroughs and helping collect information as needed.
• Assist with PCI Compliance tasks, including organizing evidence, tracking activities, and helping maintain documentation.
• Participate in Data Governance activities, such as helping document data processes, tagging information, or learning how data flows across the organization.
• Learn and support AI Risk Governance processes, including understanding how AI is used and assisting in basic research or documentation.
• Assist with policy, procedure, and standards management, including formatting documents, organizing revision cycles, and helping maintain version control.
• Support Security Awareness and Training efforts, such as helping track training completion, assisting with communications, or organizing training materials.
• Help perform general research and analysis in support of security, risk, and compliance operations.
• Assist in launching new GRC initiatives and support special projects or process improvements as assigned.
• Perform additional tasks or projects as needed, supporting the team based on workload, priorities, and learning opportunities.

Qualifications

To perform this job successfully, an individual must be able to perform each essential duty mentioned satisfactorily. The requirements listed below are representative of the knowledge, skill, and/or ability required.

Education And Experience

• Pursuing a degree in business or related area of study at an accredited college or university with a cumulative GPA of 2.5 or higher.
• Experience with PowerPoint, Word, and Excel preferred.

Key skills/competency

• Governance, Risk, and Compliance (GRC)
• Vendor Risk Management
• SOX IT General Controls
• PCI Compliance
• Data Governance
• AI Risk Governance
• Policy & Standards Management
• Security Awareness Training
• Information Security Processes
• Business Administration