GRC Intern

Department: Information Technology – Governance, Risk & Compliance (GRC)

Reporting To: Sr. Manager – GRC / Information Security

Duration: 6–9 Months (Extendable / PPO based on performance)

Role Overview

We are looking for a GRC Intern to support the Information Security and Compliance team in maintaining security, privacy, and governance frameworks. The role offers hands-on exposure to ISO 27001, ISO 27701, DPDPA, audit coordination, risk management, vendor assessments, and compliance reporting.

Key Responsibilities

• Support internal and external audits by collecting and maintaining audit evidence.
• Maintain ISMS/PIMS documentation, risk registers, CAPA trackers, and compliance records.
• Assist with DPDPA activities, including RoPA updates and Data Subject Rights tracking.
• Coordinate vendor security assessments and maintain vendor risk registers.
• Support user access reviews, asset inventory management, and security awareness initiatives.
• Prepare monthly GRC dashboards, reports, and Minutes of Meetings (MoMs).

Eligibility

• B.Tech (CS/IT), BCA, MCA, B.Sc. (CS), or MBA (Information Systems).
• Basic understanding of Information Security, Risk Management, and Data Privacy.
• Proficiency in MS Excel (Pivot Tables, VLOOKUP/XLOOKUP), Word, and PowerPoint.

Preferred

• Knowledge of ISO 27001, ISO 27701, or DPDPA.
• Certifications such as ISO 27001 Foundation, Google Cybersecurity, Microsoft SC-900, or ISC² CC.
• Prior internship or project experience in Information Security, Compliance, Audit, or IT Support.

Skills Required

• Strong analytical and documentation skills.
• Excellent communication and stakeholder coordination.
• High attention to detail and confidentiality.
• Eagerness to learn and work in a collaborative environment.

This internship provides an excellent opportunity to build a career in Information Security, Governance, Risk & Compliance, and Data Privacy, with the possibility of a full-time opportunity based on performance.