Data Security Governance Intern: AI & Risk Remediation

Job Summary

The portfolio IT and data security team governs cybersecurity posture across a portfolio of software Volaris Business Units (VBUs) at varying stages of security maturity. Our work is relationship‑driven and output‑oriented: we assess, advise, track, and elevate rather than implement directly. The intern will be embedded in this model, taking on real work with tangible portfolio impact from day one. Additionally, the intern will have the opportunity to participate in incident response activities, create resources for VBUs, and teach VBUs how to use a standardized set of data‑security tools and services.

In the USA, this job profile is EXEMPT and will not be eligible for paid overtime. If you are unsure of what job profile to choose please contact your HR Partner.

• 1. Governance Follow‑Up & Remediation Tracking
  • Maintain and update a centralized risk remediation tracking workbook for multiple BUs.
  • Monitor open action items for completeness, ownership, and target dates; flag aging or stalled items for escalation.
  • Draft follow‑up correspondence to BU contacts requesting status updates, evidence of completion, or remediation plans.
  • Assist in preparing governance dashboards and status reports for leadership review cycles.
  • Document and organize evidence packages supporting control closure claims.
• 2. AI Efficiency & Effectiveness Research
  • Inventory current manual, repetitive, or high‑volume governance tasks as candidates for AI‑assisted improvement.
  • Pilot and evaluate AI tools against selected tasks using defined criteria: accuracy, time savings, auditability, risk, and practical usability by non‑technical staff.
  • Produce a structured evaluation report documenting findings, limitations, and recommendations for each piloted use case.
  • Develop practical AI‑assisted workflow templates or prompting guides that the broader team can adopt for recurring governance activities.
• 3. Assessment & Documentation Support
  • Assist in preparing pre‑assessment materials and post‑assessment write‑ups aligned to the team’s security control framework.
  • Research control topics, emerging threat intelligence, or regulatory requirements as directed to support assessment activities.
  • Contribute to the maintenance of standard templates, playbooks, and reference documentation used by the governance team.
• 4. Special Projects (As Assigned)
  • Participate in special projects as deemed appropriate.

• Currently enrolled in or recently graduated from a degree program in cybersecurity, information systems, computer science, or a related field.
• Strong written communication skills.
• Ability to manage multiple work streams, track tasks to completion, and isolate proactively when blocked.
• Curiosity about AI tools and the discipline to evaluate them critically rather than uncritically.

• Familiarity with security frameworks or standards (e.g., CIS Controls, NIST CSF, SCF, ISO 27001), even at a conceptual level.
• Exposure to vulnerability management concepts, risk scoring, or GRC tooling.
• Prior use of AI tools with the ability to articulate what worked and what didn’t.
• Experience with Microsoft 365.

Direct exposure to enterprise‑level security governance in a complex, multi‑entity portfolio environment spanning multiple geographies. Mentorship from experienced security governance professionals with a focus on practical skill development. Familiarity with security control frameworks, remediation lifecycle management, and risk communication.

This is a remote‑friendly role. The intern will be expected to participate in regular video check‑ins, maintain clear documentation of their work, and communicate progress and blockers. Worker Type:
Temporary (Fixed Term).