Risk & Governance Intern — AI-Driven Compliance & GDPR

F. Hoffmann-La Roche AG; Sant Cugat del Vallès; On-site; EUR 11,000 - 15,000; Full time

Job summary

Roche is seeking a Risk & Governance Intern to bridge regulatory operations, information security, and digital innovation. You will support core compliance and quality control, including risk assessments, audit readiness, GDPR monitoring, and maintaining Global Standard Procedures.

You will leverage AI tools and build low-code/no-code automations to remove bottlenecks, streamline policy tracking, and optimize department workflows.

Qualifications

• Recent graduate in Information Systems, Computer Science, Engineering, or a related field.
• Familiarity with core information security concepts (risk, confidentiality, integrity, availability) and GDPR.
• Genuine curiosity about AI tools and their applications in business problems.
• Strong written and verbal communication, able to turn data into a clear message.
• Well organised, proactive, and comfortable with limited supervision.
• Fluency in English.

Responsibilities

• Assist in researching and monitoring new industry regulations, laws, and standards.
• Leverage AI tools to summarize regulatory updates and assess impact on policies.
• Support internal compliance reviews, risk assessments, and quality checks.
• Help gather audit evidence and review documentation for regulatory adherence.
• Analyze existing compliance workflows to identify bottlenecks.
• Propose and help build low-code/no-code automated solutions.
• Help draft, review, and update Global Standard Procedures (GSPs).
• Assist in building automated tracking systems for policy renewals and acknowledgments.
• Prepare clear materials for leadership meetings and ISMS Management Reviews.

Skills

Regulatory awareness

AI curiosity

Communication skills

Information security basics

Education

Recent graduate in Information Systems, CS, or Engineering

Tools

Low-code / no-code platforms

Job description

Roche is seeking a Risk & Governance Intern to bridge regulatory operations, information security, and digital innovation. You will support core compliance and quality control, including risk assessments, audit readiness, GDPR monitoring, and maintaining Global Standard Procedures.

You will leverage AI tools and build low-code/no-code automations to remove bottlenecks, streamline policy tracking, and optimize department workflows.