GRC Intern

Who we seek:

We’re looking for a GRC Intern to join our GRC team. Our team supports the organization’s security and compliance initiatives by assessing risk, ensuring regulatory compliance, and improving security governance. As a GRC Intern, you will assist with projects related to risk assessments, policy development, compliance audits, and security governance. This role is designed for individuals interested in growing their knowledge of cybersecurity frameworks, regulatory requirements, and risk management principles. Our ideal candidate is someone eager to learn, detail-oriented, and interested in developing foundational skills in GRC. You will have the opportunity to support compliance initiatives, conduct research on security best practices, and help improve GRC processes.

What you’ll do:

• Assist in maintaining security compliance and risk management documentation including policies, standards, and processes
• Assist in maintaining compliance programs for key certifications such as ISO 27001, SOC 2, HIPAA, PCI, and support external audits to maintain security certifications
• Assist in optimizing the use and optimization of Governance, Risk & Compliance (GRC) tools such as Whistic, Anecdotes, Confluence, and Jira to drive effective security governance
• Assist in enforcing security policies and procedures based on industry standards, ensuring compliance across teams
• Assist in managing our third-party portfolio to ensure their compliance with BigID’s security standards
• Contribute to the development and continuous improvement of disaster recovery and business continuity plans.

What you’ll bring:

• Meets one or more of the following requirements:
  • Currently enrolled in a degree-seeking program
  • Currently enrolled in a technical or certificate program
  • Preferred education in Cybersecurity, Information Systems, Business Administration, or a related field with strong academic performance
• Knowledge of GRC frameworks, regulations, and standards, including but not limited to NIST, ISO 27001, SOC 2, PCI-DSS, and GDPR, preferred
• Familiarity with risk management principles, compliance assessments, and audit processes preferred
• Understanding of security and compliance best practices across cloud environments
• Detail-oriented, with the ability to multitask and quickly apply new concepts to accomplish assignments
• Excellent interpersonal and analytical skills
• Previous experience through work or internship preferred

Our Values:

We look for people who embody our values - Care, Do,Try & Shine.

• Care - We care about our customers and each other
• Do - We do what it takes to make a positive impact
• Try - We try our best and we don’t give up
• Shine - We shine and make it our mission to always stand out

This is a 10-week paid internship starting on June 4th and ending on August 8th, working up to 35 hours per week. Hourly pay for this role is $20/hr.

#LI-Remote

#LI-AR1