AI Governance & Risk Compliance Internship

About the Position

AI Governance & Risk Compliance Internship

Build our AI governance framework: map how teams use generative AI, draft the policies and keep audit evidence ready for SOC 2 Type 2 and ISO. Every deliverable gets used.

We usually respond within a week

Responsibilities

• Interview departments about their use of generative AI, and build and maintain our Shadow AI risk registry
• Draft acceptable use policies and gap analyses against NIST AI RMF, ISO/IEC 42001 and the EU AI Act, and support AI impact assessments
• Collect and organize compliance evidence in Drata for our SOC 2 Type 2 and ISO audits
• Run third-party vendor risk reviews, update security questionnaires and maintain the operational risk register

Requirements

• Are following a bachelor's or master's program, in cybersecurity, risk management, law, ESG, compliance, technology policy or a related field
• Are organized and analytical, with sharp attention to detail and strong policy writing skills
• Speak and write fluent English
• Have an interest in or knowledge of frameworks such as ISO 27001, GDPR, SOC 2, ISO/IEC 42001 or NIST AI RMF

Nice to Have

• None specified

We Offer

• Monthly stipend: €750 a month at 40 hours a week, pro-rated for fewer hours
• Your own hours: 20 to 40 hours a week, and you largely choose which hours and days
• Hybrid: one to two days a week at our Leeuwarden hub, the rest is up to you
• Regular 1:1s: with your supervisor, to set priorities and get direct feedback
• Room for your thesis: the subject can come from your work here, the writing happens outside office hours
• A way in: interns have stayed on after their internship, like Ben in our data team

About the Company

Datamaran is the AI-powered governance platform for enterprise.

Regulations change. Stakeholders shift. Markets move. Large organizations are expected to hold a clear, defensible position on all of it, and most still get there through slow manual work on fragmented signals.

We turn regulatory, stakeholder and market signals into intelligence that leadership teams can act on, built on 12+ years of expertise in non-financial risk. Risk, legal, compliance, sustainability and corporate affairs teams at Bridgestone, Dell, Cisco, Kraft Heinz and PepsiCo use Datamaran to decide what matters, and to stand behind that decision afterwards.

We are 100+ people across the UK, US, Spain and the Netherlands.

Know what's coming. Act on it.

Founded in 2014