Junior Information Security & Data Protection (Internship)

Internship in the Information Security & Data Protection team focused on governance risk and compliance (GRC). Support for the ISMS (ISO/IEC 27001) GDPR compliance and AI governance (EU AI Act).

Governance- and process-oriented role; basic IT network and systems knowledge is a plus. 

Support the implementation and maintenance of management systems internal controls and compliance requirements (information security privacy and governance).

Assist in internal audits to assess the effectiveness of security controls.

Help identify and assess information security risks.

Contribute to security training and awareness initiatives and related documentation.

Work with IT Procurement & Facilities and HR to ensure security measures are correctly applied.

 Support GDPR compliance and personal data protection activities.

Support AI governance initiatives including monitoring EU AI Act requirements and the responsible use of AI.

Qualifications :

Currently studying or recently graduated in Information Security Computer Science Information Technology or a related field.

A higher vocational qualification (Técnico Superior) in an IT-related field is also welcome.

Candidates from other backgrounds (e.g. Law Business Administration Industrial Engineering) with a genuine interest in information security and compliance will also be considered.

Must be eligible for an internship agreement with a university or training institution.

Relevant courses or entry-level certifications are a plus (e.g. ISO/IEC 27001 Foundation ISC2 CC CompTIA Security data protection / GDPR courses). 

No previous professional experience required; academic projects previous internships or personal projects in information security IT or compliance are a plus.

Basic knowledge of information security principles (confidentiality integrity and availability) networks and systems.

Familiarity with the principles and basic requirements of ISO standards and process management. Basic knowledge of data protection and regulatory frameworks such as the GDPR.

Interest in or initial knowledge of artificial intelligence AI governance and the regulatory requirements of the EU AI Act.

Standards: ISO/IEC 27001 and ISO/IEC 27002; awareness of ISO 9001 or the NIST Cybersecurity Framework is a plus. Regulations: GDPR and Spanish LOPDGDD EU AI Act; awareness of the NIS2 Directive is a plus. Microsoft 365 (Excel Word PowerPoint Teams SharePoint) for documentation reporting and evidence management.

Experience with GRC or audit tools is a plus but not required. 

 Upper-Intermediate English Level (B2 Level)

Soft Skills:

Clear and effective communication skills both verbal and written. Initiative proactivity and willingness to take on responsibility. Team player able to collaborate in a multidisciplinary environment. Commitment to continuous learning and improvement in the field of information security. Strong work ethic integrity and discretion when handling sensitive and confidential information. Organized and detail-oriented with an analytical mindset. 

Remote Work :

No

Employment Type :

Full-time