About the Role
We're looking for a detail-oriented GRC Intern to join our Compliance team at inFeedo. This is an exciting opportunity to work on the frontline of information security governance, with a strong emphasis on documentation, frameworks like ISO 27001, and regulatory compliance. If you have a knack for structure, clarity, and curiosity, this is the internship for you.
🔍 What You’ll Be Doing
Documentation & Policy Management
Assist in drafting, reviewing, and updating infosec and compliance documentation, including SOPs, policies, audit checklists, risk assessments, and process workflows.
Organize and maintain our internal compliance documentation library in a structured and audit-ready format.
GRC Program Support
Support the implementation and tracking of GRC initiatives, including controls mapping, third-party risk reviews, and internal assessments.
Help with ISO 27001 readiness activities, including gap assessments, risk treatment plans, and evidence collection.
Contribute to compliance monitoring and audit tasks for ISO, SOC 2, GDPR, and others.
Security Awareness & Governance
Collaborate with the InfoSec team to assist in awareness campaigns, compliance tracking, and reporting.
Work with cross-functional teams to gather data and insights for risk reviews, access control audits, and vendor assessments.
🧠 What We’re Looking For
Must-Have:
Strong communication and documentation skills – especially in writing formal policies, procedures, data flow diagrams, or SOPs.
Good hold on AI technologies, must be adept at using ChatGPT/similar tools for productivity and research.
Understanding of information security principles, with exposure to GRC concepts.
Hands-on familiarity with ISO/IEC 27001, preferably ISO 27001 Lead Auditor (LA) or internal auditor trained.
Ability to learn quickly and work independently in a fast-paced environment.
Attention to detail, analytical mindset, and basic project tracking.
Good to Have:
Background in Cybersecurity, Information Systems, Computer Science,...