Intern - Governance, Risk, and Compliance (GRC)

About the role#

IBTS is seeking a motivated and detail-oriented Governance, Risk, and Compliance (GRC) Intern to support cybersecurity governance, risk management, and data protection initiatives. This role provides hands-on experience in enterprise security governance, compliance operations, and modern data protection. You will work closely with cybersecurity and IT teams to assist with policy management, audit readiness, and security governance operations aligned with frameworks such as SOC 2 and CMMC 2.0.

What you'll do#

• Assist with reviewing, organizing, and maintaining security policies, standards, and procedures.
• Support compliance tracking, audit preparation, and evidence collection activities.
• Maintain risk registers, control documentation, and governance records.
• Assist with security awareness and governance-related initiatives.
• Support data governance and protection efforts, including Microsoft Purview and Data Loss Prevention (DLP).
• Help review and organize access control, documentation, and compliance-related records.
• Assist with reporting, documentation updates, and process improvement initiatives.

What you'll need#

• Currently pursuing or recently completed a degree in Cybersecurity, Information Systems, Information Assurance, Business, Risk Management, or a related field.
• Strong written communication, analytical, and organizational skills.
• High attention to detail and the ability to manage documentation accurately.
• Familiarity with Microsoft 365, Excel, SharePoint, and Teams.
• An interest in governance, risk management, audit support, security controls, and compliance frameworks such as SOC 2 and CMMC 2.0.

Location & details#

• Location: Ashburn, Virginia (On-site).
• Status: Paid, part-time internship (not to exceed 29 hours per week).
• Duration: 3–6 months (rolling).
• Note: This position does not offer sponsorship.