AI Governance & Risk Compliance Internship

About the Position

AI Governance & Risk Compliance Internship

We are building our AI governance framework and strengthening our compliance operations at the same time, and you'll be part of both. You'll join our Cybersecurity & Risk Governance team to map how teams use generative AI, draft the policies that govern it, and keep our audit evidence ready for our SOC 2 Type 2 and ISO audits. This is the foundation of how we manage AI risk, and every deliverable is reviewed and put to use.

Responsibilities

• Interview departments about their use of generative AI, and build and maintain our Shadow AI risk registry
• Draft acceptable use policies and gap analyses against NIST AI RMF, ISO/IEC 42001 and the EU AI Act, and support AI impact assessments
• Collect and organize compliance evidence in Drata for our SOC 2 Type 2 and ISO audits
• Run third-party vendor risk reviews, update security questionnaires and maintain the operational risk register

What You'll Learn

You'll get hands-on experience with enterprise GRC workflows and compliance tooling like Drata in a specialized, international team. Every policy draft and gap analysis you write gets direct feedback before it's put to use.

Requirements

• Are following a bachelor's or master's program, in cybersecurity, risk management, law, ESG, compliance, technology policy or a related field
• Are organized and analytical, with sharp attention to detail and strong policy writing skills
• Speak and write fluent English
• Have an interest in or knowledge of frameworks such as ISO 27001, GDPR, SOC 2, ISO/IEC 42001 or NIST AI RMF

We Offer

• Opportunity to work in a cutting-edge field of AI governance and compliance
• Direct impact on the company's AI risk management framework
• Exposure to international compliance standards and frameworks
• Mentorship and feedback from experienced professionals

About the Company

[Company description if present]