GRC (Governance, Risk & Compliance) Intern

About the Role:

We are looking for a passionate and detail-oriented GRC (Governance, Risk & Compliance) Intern to join our team in Mumbai. This is an excellent opportunity for recent graduates who are eager to begin their career in the domains of cybersecurity, risk management, and IT compliance. You will gain hands-on exposure to audit support, risk assessments, regulatory frameworks, and policy development under the guidance of experienced professionals. 

Responsibilities

1. Assist in the execution of GRC audits, including IT General Controls (ITGC), application controls, and infrastructure assessments.
2. Support risk assessments to identify potential control gaps and areas of non-compliance.
3. Participate in walkthroughs and meetings with stakeholders across IT, InfoSec, and business teams.
4. Help in evaluating compliance with frameworks such as ISO 27001, NIST CSF, RBI, IRDAI, SEBI-CSCRF, etc.
5. Collect and organize audit evidence and assist in preparing documentation to support control effectiveness.
6. Help maintain audit findings, track remediation status, and follow up on corrective actions.
7. Contribute to the development of SOPs, policies, and compliance escalation matrices.
8. Collaborate with cross-functional teams during GRC tool implementations and related compliance initiatives.
9. Stay updated on cybersecurity trends, emerging risks, and regulatory changes.

Qualifications

1. Bachelor’s degree (completed or pursuing final year) in Computer Science, IT, Cybersecurity, or a related discipline.
2. Certifications such as ISO 27001 LA/LI, CompTIA Security+, or similar (preferred, not mandatory).