Intern - Governance, Risk, and Compliance (GRC)

Location and DurationAshburn, VA – OnsiteTemporary, part‑time position not to exceed 29 hours per week.Position SummaryWe are seeking a motivated and detail‑oriented Governance, Risk, and Compliance (GRC) Intern to support cybersecurity governance, compliance, risk management, and data protection initiatives across the organization. The intern will work closely with cybersecurity and IT teams to assist with policy management, audit readiness, compliance tracking, documentation management, and security governance operations supporting frameworks such as SOC 2 and CMMC 2.0. This role provides hands‑on experience in enterprise security governance, compliance operations, and modern data protection initiatives.Key ResponsibilitiesAssist with reviewing, organizing, and maintaining security policies, standards, and procedures.Support compliance tracking, audit preparation, and evidence collection activities.Maintain risk registers, control documentation, and governance records.Assist with security awareness and governance‑related initiatives.Support data governance and protection efforts including Microsoft Purview, Data Loss Prevention (DLP), Information Protection, and Insider Risk Management processes.Help review and organize access control, documentation, and compliance‑related records.Assist with reporting, documentation updates, and process improvement initiatives.Collaborate with cybersecurity and IT teams to support ongoing compliance and governance operations.QualificationsPreferred Qualifications:Pursuing or recently completed a degree in Cybersecurity, Information Systems, Information Assurance, Business, Risk Management, or a related field.Strong written communication, analytical, and organizational skills.Attention to detail and ability to manage documentation accurately.Familiarity with Microsoft 365, Excel, SharePoint, and Teams.Interest in governance, risk management, audit support, security controls, and compliance frameworks such as SOC 2 and CMMC 2.0.Collaborate professionally across teams.Nice‑to‑Have Skills:Exposure to Microsoft Purview, Data Loss Prevention (DLP), Information Protection, or Insider Risk Management concepts.Familiarity with cybersecurity governance or compliance processes.Understanding of security policies, audit procedures, or risk assessments.Experience with documentation management.Basic understanding of Microsoft Azure or cloud security concepts.Learning OpportunitiesGovernance, Risk, and Compliance (GRC) operationsSecurity policy and standards managementAudit readiness and compliance trackingRisk assessment and control documentationSOC 2 and CMMC 2.0 aligned governance processesData protection and governance initiativesMicrosoft Purview, DLP, Information Protection, and Insider Risk Management conceptsEnterprise cybersecurity and IT governance collaborationExample ProjectsAssisting with audit evidence collection and compliance tracking activities.Organizing and updating cybersecurity policies and governance documentation.Supporting data classification and information protection initiatives.Reviewing shared file access and data governance reporting.Supporting risk register maintenance and control documentation updates.Helping improve documentation consistency and compliance readiness processes.Internship DetailsDuration: 3–6 months (flexible)IBTS is proud to be an Equal Opportunity and affirmative action employer. All qualified applicants will receive equal consideration for employment without regard to race, color, religion, sex, national origin, age, disability, or sexual orientation. This opportunity is open to Section S3 Residents. Veterans and individuals with disabilities are encouraged to apply.#J-18808-Ljbffr