Department: Information Technology – Governance, Risk & Compliance (GRC)

Reporting To: Sr. Manager – GRC / Information Security

Duration: 6–9 Months (Extendable / PPO based on performance)

Role Overview

We are looking for a GRC Intern to support the Information Security and Compliance team in maintaining security, privacy, and governance frameworks. The role offers hands-on exposure to ISO 27001, ISO 27701, DPDPA, audit coordination, risk management, vendor assessments, and compliance reporting.

Key Responsibilities

Support internal and external audits by collecting and maintaining audit evidence.
Maintain ISMS/PIMS documentation, risk registers, CAPA trackers, and compliance records.
Assist with DPDPA activities, including RoPA updates and Data Subject Rights tracking.
Coordinate vendor security assessments and maintain vendor risk registers.
Support user access reviews, asset inventory management, and security awareness initiatives.
Prepare monthly GRC dashboards, reports, and Minutes of Meetings (MoMs).

Eligibility

B.Tech (CS/IT), BCA, MCA, B.Sc. (CS), or MBA (Information Systems).
Basic understanding of Information Security, Risk Management, and Data Privacy.
Proficiency in MS Excel (Pivot Tables, VLOOKUP/XLOOKUP), Word, and PowerPoint.

Preferred

Knowledge of ISO 27001, ISO 27701, or DPDPA.
Certifications such as ISO 27001 Foundation, Google Cybersecurity, Microsoft SC-900, or ISC² CC.
Prior internship or project experience in Information Security, Compliance, Audit, or IT Support.

Skills Required

Strong analytical and documentation skills.
Excellent communication and stakeholder coordination.
High attention to detail and confidentiality.
Eagerness to learn and work in a collaborative environment.

This internship provides an excellent opportunity to build a career in Information Security, Governance, Risk & Compliance, and Data Privacy, with the possibility of a full-time opportunity based on performance.