About the internship
We are building our AI governance framework and strengthening our compliance operations at the same time, and you'll be part of both. You'll join our Cybersecurity & Risk Governance team to map how teams use generative AI, draft the policies that govern it, and keep our audit evidence ready for our SOC 2 Type 2 and ISO audits. This is the foundation of how we manage AI risk, and every deliverable is reviewed and put to use.

In this role, you will:

• Interview departments about their use of generative AI, and build and maintain our Shadow AI risk registry

• Draft acceptable use policies and gap analyses against NIST AI RMF, ISO/IEC 42001 and the EU AI Act, and support AI impact assessments

• Collect and organize compliance evidence in Drata for our SOC 2 Type 2 and ISO audits

• Run third-party vendor risk reviews, update security questionnaires and maintain the operational risk register

What you'll learn
You'll get hands-on experience with enterprise GRC workflows and compliance tooling like Drata in a specialized, international team. Every policy draft and gap analysis you write gets direct feedback before it's put to use.

Who we're looking for
You will thrive here if you:

• Are following a bachelor's or master's program, in cybersecurity, risk management, law, ESG, compliance, technology policy or a related field

• Are organized and analytical, with sharp attention to detail and strong policy writing skills

• Speak and write fluent English

• Have an interest in or knowledge of frameworks such as ISO 27001, GDPR, SOC 2, ISO/IEC 42001 or NIST AI RMF