Information Security (GRC) Intern

Job Title: GRC Intern

We are looking for a motivated GRC Intern to support our Governance, Risk, and Compliance (GRC) and Data Privacy functions. The role centres on assisting with evidence collection and audit support for ISO 27001, SOC 2 Type II, and data privacy regulations such as GDPR and DPDPA, along with other GRC activities as needed. we're looking for someone with a basic understanding of information security functions, who is energetic, eager to learn, and ready to work in a fast-paced environment.Key Responsibilities

• Assist in evidence collection, documentation, and coordination for ISO 27001, SOC 2 Type II, and other compliance audits
• Support internal and external audits, including tracking open items and liaising with control owners
• Help maintain and improve GRC processes, policies, and documentation
• Perform gap assessments and track remediation activities to closure
• Contribute to data privacy compliance efforts under GDPR, DPDPA, and other applicable regulations.
• Review and respond to client security questionnaires and due diligence requests
• Support implementation and maintenance of ISO standards such as ISO 27001 and ISO 9001
• Monitor ongoing compliance activities and help ensure controls are operating effectively
• Assist with other GRC and information security tasks and projects as assigned

Requirements

• Basic understanding of information security functions and principles (e.g., access control, risk management, incident response)
• Familiarity with compliance frameworks such as ISO 27001, SOC 2 Type II, and ISO 9001 (preferred)
• Awareness of data privacy regulations such as GDPR and DPDPA (basic level is sufficient)
• Good communication and documentation skills
• Energetic, eager to learn new things, and ready to work in a fast-paced environment
• Attention to detail and a proactive, ownership-driven mindset
• Basic awareness of core information security concepts such as access control, network security, or vulnerability management