AI Governance & Risk Compliance Internship

About the internship
We are building our AI governance framework and strengthening our compliance operations at the same time and youll be part of both. Youll join our Cybersecurity & Risk Governance team to map how teams use generative AI draft the policies that govern it and keep our audit evidence ready for our SOC 2 Type 2 and ISO audits. This is the foundation of how we manage AI risk and every deliverable is reviewed and put to use.

In this role you will:

• Interview departments about their use of generative AI and build and maintain our Shadow AI risk registry

• Draft acceptable use policies and gap analyses against NIST AI RMF ISO/IEC 42001 and the EU AI Act and support AI impact assessments

• Collect and organize compliance evidence in Drata for our SOC 2 Type 2 and ISO audits

• Run third-party vendor risk reviews update security questionnaires and maintain the operational risk register

What youll learn
Youll get hands-on experience with enterprise GRC workflows and compliance tooling like Drata in a specialized international team. Every policy draft and gap analysis you write gets direct feedback before its put to use.

Who were looking for
You will thrive here if you:

• Are following a bachelors or masters program in cybersecurity risk management law ESG compliance technology policy or a related field

• Are organized and analytical with sharp attention to detail and strong policy writing skills

• Speak and write fluent English

• Have an interest in or knowledge of frameworks such as ISO 27001 GDPR SOC 2 ISO/IEC 42001 or NIST AI RMF