Governance, Risk, and Compliance (GRC) Intern

About the role#

This is a part-time, temporary internship providing hands-on experience in enterprise security governance, compliance operations, and data protection. You will work closely with cybersecurity and IT teams to support policy management, audit readiness, and risk management initiatives. This role is designed for individuals interested in frameworks such as SOC 2 and CMMC 2.0.

What you'll do#

• Review, organize, and maintain security policies, standards, and procedures.
• Support compliance tracking, audit preparation, and evidence collection activities.
• Maintain risk registers, control documentation, and governance records.
• Assist with security awareness and governance-related initiatives.
• Support data governance and protection efforts, including Microsoft Purview, Data Loss Prevention (DLP), and Information Protection.
• Help review and organize access control and compliance-related documentation.
• Collaborate with cybersecurity and IT teams to support ongoing governance operations.

What you'll need#

• Currently pursuing or recently completed a degree in Cybersecurity, Business Administration, Computer Science, Data Science, or a related field.
• Strong written communication, analytical, and organizational skills.
• High attention to detail for managing documentation accurately.
• Familiarity with Microsoft 365, Excel, SharePoint, and Teams.
• An interest in governance, risk management, audit support, and compliance frameworks like SOC 2 and CMMC 2.0.
• Ability to collaborate professionally across teams.

Location & details#

• Location: Ashburn, Virginia (On-site).
• Schedule: Part-time, not to exceed 29 hours per week.
• Duration: 3–6 months (flexible).
• Employment type: Paid internship.