Summer Cybersecurity Compliance Intern

To qualify for US internships, you must be currently enrolled in a degree-seeking program with an expected graduation date after the internship/co‑op ends. If you do not meet this requirement, we invite you to explore other opportunities available on our careers website.

Intuit internships are 12 weeks throughout the summer. We have fixed start and end dates that are designed to work with various universities’ academic calendars.

• Cohort 1:
  Monday, May 17 - Friday, August 6, 2027 (12 weeks)
• Cohort 2:
  Monday, June 14 - Friday September 3, 2027 (12 weeks)

About our Emerging Talent Program:

Intuit invests in Emerging Talent because fresh perspectives strengthen our products and teams. The program is backed by a culture that values curiosity and collaboration, and you'll be supported by dedicated managers and mentors who are invested in your growth. As an intern or co‑op, you'll work on meaningful projects with business impact, many centered on AI and emerging technologies, and contribute to driving decisions.

You'll build skills through function‑specific learning opportunities, connect with a global community of interns and co‑ops through dedicated programming and social events, and get exposure to senior leadership and cross‑functional work across Intuit's product ecosystem. Learn more about our Intern and Co‑op Program here.

Our cybersecurity internship roles provide a unique opportunity to gain hands‑on experience in vital cybersecurity domains. This internship sits within Intuit's Cybersecurity Governance, Risk & Compliance (GRC) organization, reporting into the Security Compliance team under the CISO. Our team is responsible for industry and regulatory compliance across Intuit and its entities — including Credit Karma and Mailchimp — spanning frameworks and regulations such as ISO/IEC 27001, ISO/IEC 42001 (AI management systems), SOC 1/SOC 2, PCI DSS, HIPAA, NYDFS Part 500, DORA, NIS2, GDPR, and HIPAA.

As a Cybersecurity Compliance Intern focused on GRC compliance and engineering, you'll have the opportunity to work at the intersection of compliance, security engineering and software engineering: helping us scale a unified Common Control Framework (CCF), AI‑enabled automated evidence collection and AI‑enabled control testing and assurance management.

• Contribute to the expansion of Intuit's Common Control Framework (CCF), helping crosswalk and map controls across frameworks such as ISO/IEC 27001:2022, ISO/IEC 42001:2023, SOC 2, PCI DSS v4.0.1, DORA, NIS2, and NYDFS Part 500.
• Build GRC engineering solutions — scripts, integrations, and dashboards (e.g., Python, APIs, data visualization) — that automate compliance evidence collection, control monitoring, and audit readiness workflows.
• Support AI compliance initiatives, including readiness work for ISO/IEC 42001 certification: AI system inventories, risk and impact assessment documentation, and control implementation tracking.
• Assist with compliance integration work across Intuit entities (e.g., harmonizing Credit Karma controls, policies, and audit evidence with the enterprise compliance program).
• Participate in audit support activities: preparing control narratives, gathering and validating evidence, and tracking remediation items across SOC 2, ISO, and PCI DSS audit cycles.
• Analyze compliance data (control coverage, gaps, evidence sufficiency) and help create reporting for leadership, including metrics and dashboards that show compliance posture at a glance.

Must Haves:

• Current enrollment in a degree-seeking program (associate’s, bachelor's, master's, MBA, PhD, or the equivalent) with an expected graduation date after the internship ends
• Familiarity with AI tools and a curiosity about how AI can be applied to solve…