Intern - Governance, Risk, and Compliance; GRC

Location and Duration

Ashburn, VA – Onsite
Temporary, part‑time position not to exceed 29 hours per week.

We are seeking a motivated and detail‑oriented Governance, Risk, and Compliance (GRC) Intern to support cybersecurity governance, compliance, risk management, and data protection initiatives across the organization. The intern will work closely with cybersecurity and IT teams to assist with policy management, audit readiness, compliance tracking, documentation management, and security governance operations supporting frameworks such as SOC 2 and CMMC 2.0. This role provides hands‑on experience in enterprise security governance, compliance operations, and modern data protection initiatives.

• Assist with reviewing, organizing, and maintaining security policies, standards, and procedures.
• Support compliance tracking, audit preparation, and evidence collection activities.
• Maintain risk registers, control documentation, and governance records.
• Assist with security awareness and governance‑related initiatives.
• Support data governance and protection efforts including Microsoft Purview, Data Loss Prevention (DLP), Information Protection, and Insider Risk Management processes.
• Help review and organize access control, documentation, and compliance‑related records.
• Assist with reporting, documentation updates, and process improvement initiatives.
• Collaborate with cybersecurity and IT teams to support ongoing compliance and governance operations.

Preferred Qualifications:

• Pursuing or recently completed a degree in Cybersecurity, Information Systems, Information Assurance, Business, Risk Management, or a related field.
• Strong written communication, analytical, and organizational skills.
• Attention to detail and ability to manage documentation accurately.
• Familiarity with Microsoft 365, Excel, SharePoint, and Teams.
• Interest in governance, risk management, audit support, security controls, and compliance frameworks such as SOC 2 and CMMC 2.0.
• Collaborate professionally across teams.

Nice‑to‑Have

Skills:

• Exposure to Microsoft Purview, Data Loss Prevention (DLP), Information Protection, or Insider Risk Management concepts.
• Familiarity with cybersecurity governance or compliance processes.
• Understanding of security policies, audit procedures, or risk assessments.
• Experience with documentation management.
• Basic understanding of Microsoft Azure or cloud security concepts.

• Governance, Risk, and Compliance (GRC) operations
• Security policy and standards management
• Audit readiness and compliance tracking
• Risk assessment and control documentation
• SOC 2 and CMMC 2.0 aligned governance processes
• Data protection and governance initiatives
• Microsoft Purview, DLP, Information Protection, and Insider Risk Management concepts
• Enterprise cybersecurity and IT governance collaboration

• Assisting with audit evidence collection and compliance tracking activities.
• Organizing and updating cybersecurity policies and governance documentation.
• Supporting data classification and information protection initiatives.
• Reviewing shared file access and data governance reporting.
• Supporting risk register maintenance and control documentation updates.
• Helping improve documentation consistency and compliance readiness processes.

• Duration: 3–6 months (flexible)

IBTS is proud to be an Equal Opportunity and affirmative action employer. All qualified applicants will receive equal consideration for employment without regard to race, color, religion, sex, national origin, age, disability, or sexual orientation. This opportunity is open to Section S3 Residents. Veterans and individuals with disabilities are encouraged to apply.