About the internship
Selected intern's day-to-day responsibilities include:
1. Participate in identifying, assessing, and documenting risks related to information security, data privacy, and compliance with regulatory frameworks such as SEBI, RBI, and other relevant industry-specific regulations.
2. Contribute to drafting and updating GRC-related policies, procedures, and guidelines to align with industry standards and best practices.
3. Assist in developing, implementing, and monitoring governance, risk management, and compliance programs.
4. Support the maintenance and continuous improvement of our ISO 27001 'Information Security Management System' (ISMS), including helping with audits and documentation.
5. Assist in ensuring compliance with data privacy regulations such as GDPR, CCPA, or HIPAA by supporting privacy impact assessments, data mapping, and policy reviews.
6. Help in the preparation and maintenance of system and organization controls (SOC) reports, including SOC 1, SOC 2, and SOC 3, ensuring controls are properly documented and tested.
7. Assist in internal and external audits related to ISO 27001, data privacy, and SOC, including gathering evidence, reviewing findings, and tracking remediation efforts.
8. Conduct research on emerging regulations and standards related to information security, data privacy, and risk management.
9. Analyze data to identify trends, assess risks, and support decision-making processes.
10. Work closely with IT, Legal, HR, and other departments to ensure GRC objectives are met and support cross-functional initiatives.
11. Engage in continuous learning opportunities to deepen your understanding of GRC frameworks, ISO 27001, data privacy laws, and SOC requirements.
Earn certifications in these skills
Who can apply
Only those candidates can apply who:
1. are available for full time (in-office) internship
2. can start the internship between 20th Aug'24 and 24th Sep'24
3. are available for duration of 6 months
4. have relevant skills and interests
* Women wanting to start/restart their career can also apply.
Other requirements
1. Currently enrolled in a bachelor’s or master’s program in information technology, cybersecurity, business administration, risk management, or a related field.
2. Basic knowledge of ISO 27001: Familiarity with ISO 27001 standards and principles, particularly in the context of ISMS.
3. Data privacy awareness: Understanding of key data privacy regulations (e.g., GDPR, CCPA) and the principles of data protection and privacy.
4. SOC awareness (optional): Basic knowledge of system and organization controls (SOC), including the purpose and scope of SOC 1, SOC 2, and SOC 3 reports.
5. Analytical skills: Strong analytical and problem-solving skills with the ability to interpret data and make informed recommendations.
Perks
Certificate
Letter of recommendation
Flexible work hours
5 days a week
Number of openings
2
About Protean InfoSec Services Limited
The organization provides consulting and advisory services with a focus on critical aspects of cyber/information security governance and operations. The primary focus is on information/cyber security architecture, governance risk compliance and data privacy practice (GRC & DPP), and information/cyber security tech services (which includes information security culture building, awareness training, technical assessments & audit helpdesk).
