Risk Advisory GRC Intern - Remote (Mexico)

Echelon Risk + Cyber; Tijuana; Remote; MXN 385,000 - 513,000; Part time

Benefits offered by this job

Mentorship programs

Innovative environment

Career advancement opportunities

Collaborative culture

Job summary

Echelon Risk + Cyber invites student interns to join our Risk Advisory GRC team for the Summer 2027 program. You will assist with governance, risk, and compliance engagements while learning how organizations measure and improve security programs.

Work will involve hands-on assessments against major frameworks, drafting workpapers, and contributing to risk registers. You will gain exposure to Vanta/Drata and AI governance topics in a remote-first, multinational environment.

Qualifications

• Pursuing a degree in IT, Cybersecurity, Business, Finance, or related field.
• Advanced English (verbal and written).
• Authorized to work in Mexico without current or future visa sponsorship.
• Availability to work minimum 20 hours per week (8 AM–5 PM CST).
• Resumes must be in English.

Responsibilities

• Support governance, risk and compliance engagements using NIST, ISO 27001, SOC 2, HIPAA, PCI DSS and other frameworks.
• Gather, organize, and analyze client evidence to show alignment with controls.
• Draft assessment workpapers and report sections under guidance of senior consultants.
• Help build risk registers, remediation plans and maturity roadmaps.
• Assist with drafting and reviewing security policies, standards and procedures.
• Support third-party risk management including vendor questionnaires and reviews.
• Learn to use GRC platforms like Vanta and Drata for tracking controls and evidence.
• Gain exposure to AI governance work aligned with NIST AI RMF and ISO 42001.
• Shadow consultants on client calls to learn scoping and engagement flow.
• Participate in internal meetings on engagement planning and risk discussions.

Skills

GRC knowledge

English proficiency

Education

Pursuing IT/Cybersecurity/Business/Finance degree

Tools

GRC tools (Vanta/Drata)

Excel/Word

Job description

About Us

At Echelon Risk + Cyber, we believe in defending basic human rights to security and privacy. If you are a university student in your final three semesters and you're looking to kickstart your career in cybersecurity and consulting, this is the perfect opportunity for you. We are looking for an exceptional Risk Advisory GRC Intern to support the delivery of governance, risk, and compliance engagements while learning how organizations build, measure, and improve their security programs.

Application Details

This internship is part of our Summer 2027 Internship Program and will run from June 7, 2027, through August 12, 2027. Interns are expected to work approximately 20–25 hours per week throughout the duration of the program. Compensation ranges from $15–$20 USD per hour, depending on relevant experience.

What You Will Do

• Support control, gap, and maturity assessments aligned to frameworks such as NIST CSF, NIST 800-171, ISO 27001, SOC 2, HIPAA, PCI DSS, CIS Controls, and CMMC.
• Gather, organize, and analyze client evidence, and document how it supports or fails to support each control.
• Draft assessment workpapers and report sections under the guidance of senior consultants, with attention to clear and accurate writing.
• Help build and maintain risk registers, remediation plans, and maturity roadmaps.
• Assist with drafting and reviewing security policies, standards, and procedures.
• Support third-party risk management work, including vendor questionnaires and review of vendor documentation.
• Learn how GRC platforms such as Vanta and Drata are used to track controls, evidence, and audit readiness.
• Gain exposure to AI governance work, including NIST AI RMF and ISO 42001 aligned assessments.
• Shadow consultants on client calls and interviews to learn how engagements are scoped, run, and communicated.
• Participate in internal team meetings to learn engagement planning, risk discussions, and advisory approaches.
• Research cybersecurity trends, frameworks, and regulatory requirements, and share what you learn with the team.
• Assist leadership with proposals, internal process improvement, and thought leadership content such as blog posts and knowledge sharing.

Your Knowledge, Skills, And Abilities

• Strong interest in risk advisory and GRC, and a foundational understanding of cybersecurity principles.
• Currently pursuing a degree in IT, Cybersecurity, Business, Finance, or a related field.
• Advanced proficiency in English (verbal and written).
• Strong organizational skills to manage multiple projects and priorities.
• Attention to detail and strong analytical and problem-solving skills, including comfort reading dense control language and judging whether evidence meets it.
• Excellent communication skills, with the ability to tailor messages for diverse audiences.
• Comfort working independently in a remote-first, multinational team.
• Aspiration to work in the cybersecurity industry within the next two years.
• Availability to work a minimum of 20 hours per week (8 AM-5 PM CST, Monday‑Friday).
• English Advanced C1/C2
• Applicants must have authorization to work in Mexico without current or future visa sponsorship.
• Only resumes in English will be considered.

Preferred Qualifications

• Exposure to security or risk frameworks such as NIST, ISO 27001, CIS, SOC 2, or PCI.
• Familiarity with GRC tools, or audit and compliance processes.
• Internship, academic project, or coursework related to cybersecurity, IT risk, audit, or compliance.
• Working knowledge of Microsoft Excel and Word for documentation and tracking.

Why Echelon?

We are committed to creating an inclusive environment for our team with unquestioned integrity. If you have a special need that requires accommodation, please let your recruiter know. One of our core values is "People with Personality" and we want to allow you the space to bring your full self to work.

Hands‑On Experience

We provide real client engagement that help organizations reduce cyber risk.

We Currently Offer The Following Benefits

• Work alongside industry experts on real client engagements that help organizations reduce cyber risk.
• Mentorship - Receive guidance from seasoned professionals who are dedicated to your growth and success.
• Innovative Environment - Be part of a forward‑thinking team that values new ideas and encourages creative problem‑solving.
• Career Advancement - Gain exposure to a range of cybersecurity and risk management practices, opening doors to future career opportunities.
• Collaborative Culture - Join a supportive community where teamwork and knowledge‑sharing are at the heart of everything we do.

We value a diverse workforce and a culture of inclusivity and belonging. All employment decisions shall be made without regard to age, race, creed, color, religion, gender, national origin, ancestry, disability status, veteran status, sexual orientation, gender identity or expression, genetic information, marital status, citizenship status or any other basis as protected by federal, state, or local law. Echelon Risk + Cyber is an Equal Opportunity Employer.