Cyber Strategy & Architecture Internship: Post-Quantum Cryptography

NVISO GmbH; Brussel Hoofdstad; Hybrid; EUR 10,000 - 13,000; Part time

Job summary

NVISO GmbH, a pure-play cyber security consulting firm in Belgium, is offering a Cyber Strategy & Architecture Internship focused on Post-Quantum Cryptography (PQC). You will build a practical PQC control framework, create an EU regulatory overview and optionally conduct a PQC tabletop exercise to illustrate governance and crypto-agility readiness.

The internship adapts to the evolving quantum landscape and includes a mentor, a hybrid work model, and potential future opportunities at NVISO after

Qualifications

• Pursuing a degree in Cybersecurity, Cryptography, Computer Science, Engineering, Governance or related field.
• Excellent written communication skills in English and Dutch.
• Basic knowledge of cybersecurity, cryptography, risk management or security frameworks.
• Strong analytical and synthesis skills with attention to detail and consistency.
• Curious, methodical and comfortable working with documentation and regulatory content.

Responsibilities

• Research PQC migration, cryptographic governance and crypto-agility guidance.
• Analyze how frameworks, regulations and guidance map to a practical PQC control framework.
• Develop an EU regulatory overview of PQC requirements.
• Define a control catalogue with objectives, statements and guidance covering governance, inventory, risk, architecture, PKI and operations.
• Define a Crypto Agility maturity model to assess ability to discover, change, test, deploy and monitor cryptography at scale.
• Optionally develop a PQC tabletop exercise based on quantum computer announcements.

Skills

Analytical thinking

Regulatory analysis

Technical writing

English (fluent)

Dutch (fluent)

Education

Cybersecurity/CS/Engineering degree (pursuing)

Job description

Cyber Strategy & Architecture Internship: Post-Quantum Cryptography

Who are we?

NVISO is a pure-play cyber security consulting firm: our team is composed of security professionals who each have their specific field of expertise, ranging from Information Security Governance, Risk & Compliance to Incident Response, Penetration Testing, CSIRT/SOC, Software Security, and Training & Awareness. This fantastic blend of skills enables us to help organizations prevent, detect, and respond to complex security challenges.

What will you do?

As a Cybersecurity PQC Intern, you will develop a practical PQC control framework, EU regulatory-overview and optionally, a PQC related tabletop exercise. The objective is to translate PQC guidance, standards, and industry practices into an evidence-based framework that enables organizations to assess, govern, priorities, and safely execute their transition to quantum-resistant cryptography. The framework will help NVISO consultants deliver consistent PQC readiness assessments and actionable migration roadmaps.

The study will define controls across governance and strategy, cryptographic asset inventory, PQC risk assessment, architecture and crypto agility, PKI and certificate lifecycle management, secure engineering and testing, third-party readiness, operational deployment, and skills development.

Note: as this is a very evolving topic, the content of this internship may be adapted to the current needs and maturity of the quantum landscape.

Responsibilites:

• Research PQC migration, cryptographic governance, and crypto-agility guidance.
• Analyze how relevant frameworks, regulations and guidance can be mapped to a practical, consulting-ready PQC and crypto-agility control framework.
• Develop an EU regulatory overview of PQC requirements.
• Define a control catalogue with clear control objectives, control statements, implementation guidance, maturity indicators, and risk implications. This should cover domains like governance, crypto-asset inventory, risk prioritization, architecture, PKI, secure engineering, suppliers, operations, and awareness.
• Define a Crypto Agility maturity model that assesses an organization’s ability to discover, change, test, deploy, and monitor cryptography at scale.
• Optionally: Develop a PQC tabletop exercise based on the announcement of a cryptographically relevant quantum computer.

Requirements

• Currently pursuing a degree in Cybersecurity, Cryptography, Computer Science, Engineering, Governance, or a related field.
• Excellent written communication skills in English and Dutch.
• Basic knowledge of cybersecurity, cryptography, risk management, or security frameworks.
• Strong analytical and synthesis skills, with attention to detail and consistency.
• Curious, methodical, and comfortable working with documentation and regulatory content.

Output of Internship:
By the end of the internship, the student will have:

• Acquired deep understanding of the cybersecurity risk related to quantum computers.
• Acquired deep understanding of remediation activities for Post-Quantum Cryptography.
• Produced a practical PQC and crypto-agility control framework for assessing client readiness.
• Developed a PQC-related tabletop exercise (optional)

Practical Information

• Working model: Hybrid
• Start date: From February 2027
• Eligibility: You must be eligible to work in Belgium and meet the eligibility conditions applicable to this assignment.
• University agreement: This internship must be part of your academic programme and covered by an internship agreement with your university.
• Support: You will be supported by a dedicated NVISO mentor throughout your internship.
• Future opportunities: A successful internship may lead to further opportunities at NVISO after graduation, depending on mutual fit and available positions.