AI Governance & Risk Compliance Internship

• Are following a bachelor's or master's program, in cybersecurity, risk management, law, ESG, compliance, technology policy or a related field

• Are organized and analytical, with sharp attention to detail and strong policy writing skills

• Speak and write fluent English

• Have an interest in or knowledge of frameworks such as ISO 27001, GDPR, SOC 2, ISO/IEC 42001 or NIST AI RMF

About the internship
We are building our AI governance framework and strengthening our compliance operations at the same time, and you'll be part of both. You'll join our Cybersecurity & Risk Governance team to map how teams use generative AI, draft the policies that govern it, and keep our audit evidence ready for our SOC 2 Type 2 and ISO audits. This is the foundation of how we manage AI risk, and every deliverable is reviewed and put to use.

• Interview departments about their use of generative AI, and build and maintain our Shadow AI risk registry

• Draft acceptable use policies and gap analyses against NIST AI RMF, ISO/IEC 42001 and the EU AI Act, and support AI impact assessments

• Collect and organize compliance evidence in Drata for our SOC 2 Type 2 and ISO audits

• Run third-party vendor risk reviews, update security questionnaires and maintain the operational risk register

What you'll learn
You'll get hands-on experience with enterprise GRC workflows and compliance tooling like Drata in a specialized, international team. Every policy draft and gap analysis you write gets direct feedback before it's put to use.

Who we're looking for
You will thrive here if you: