Information Security GRC Intern: Risk & 3rd-Party Analytics

Chanel; City Of London; On-site; GBP 28,000 - 34,000; Full time

Job summary

Chanel is seeking a student to join the Global InfoSec GRC team in London for a 1-year, full-time role, ideally starting October 2026. The role involves collaboration across GISEC pillars to support 3rd party security scorecard monitoring and risk analytics.

You will assist with training and awareness initiatives, monitoring supplier security, and documentation of GISEC processes, gaining hands-on IT security experience in a real-world environment.

Qualifications

• Enrolled in a Bachelor’s or Master’s program in Information Technology, Computer Science or Data Analytics.
• Excellent interpersonal skills and ability to communicate concisely with both functional and technical experts.
• Strong self-motivation, prioritization and analytical thinking.
• Ability to work autonomously when required and focus on customer outcomes.

Responsibilities

• Support Cyber security training and awareness initiatives across Chanel.
• Assist monitoring and reporting of Chanel's 3rd party supplier security scorecard and data analytics.
• Support roll-out and maintenance of the risk management / GRC application as directed by the Senior Manager.
• Assist 3rd party assurance processes and assessments per GISEC GRC processes.
• Document and maintain GISEC common processes and repository of documentation.
• Collaborate with other InfoSec pillars to ensure Info Security is seen as a partner.

Skills

Interpersonal skills

Self-motivated

Prioritization

Analytical skills

Autonomous work

Customer oriented

English communication

French desirable

Education

Bachelor or Master’s program in IT/CS/Data Analytics

Job description

Chanel is seeking a student to join the Global InfoSec GRC team in London for a 1-year, full-time role, ideally starting October 2026. The role involves collaboration across GISEC pillars to support 3rd party security scorecard monitoring and risk analytics.

You will assist with training and awareness initiatives, monitoring supplier security, and documentation of GISEC processes, gaining hands-on IT security experience in a real-world environment.