Cybersecurity & Compliance Intern — Onsite in Phoenix

AIRO Group; Phoenix (AZ); On-site; USD 21,000 - 30,000; Part time

Benefits offered by this job

PTO

Health insurance stipend

401(k) with company match

EAP

Long-Term Disability

Job summary

AIRO Group in Phoenix, AZ seeks a Cybersecurity & Compliance Intern (Part-Time) to support the IT team in strengthening cybersecurity and compliance programs. The role offers hands‑on experience with NIST SP 800-171, CMMC, and security operations, reporting, and documentation, working closely with the IT Director and staff.

The intern will assist with controls, risk assessment, vulnerability management, and security reviews across endpoints, networks, and Microsoft 365 while promoting secure

Qualifications

• Currently pursuing or recently completed a degree or certificate in Cybersecurity, Information Technology, Computer Science, Information Assurance, or a related field.
• Foundational understanding of cybersecurity principles.
• Familiarity with NIST SP 800-171, NIST 800-53, NIST Cybersecurity Framework, CMMC, or similar security frameworks.
• Strong attention to detail and organizational skills.
• Ability to document technical information clearly and accurately.
• Strong analytical and problem‑solving skills.
• Ability to work independently while knowing when to ask questions.

Responsibilities

• Assist with implementation and documentation of NIST SP 800-171 and CMMC security controls.
• Review existing policies, procedures, and technical configurations against applicable NIST/CMMC requirements.
• Help maintain a System Security Plan (SSP) and supporting compliance documentation.
• Assist with developing and maintaining Plans of Action & Milestones (POA&Ms) where applicable.
• Research NIST, CMMC, DoD, and related cybersecurity requirements and translate requirements into actionable IT tasks.
• Assist with preparing documentation and evidence for internal assessments and future CMMC assessments.
• Track control implementation status and identify missing documentation or evidence.
• Assist with vulnerability and patch management activities.
• Review security alerts, endpoint security information, and other cybersecurity monitoring data.
• Assist with endpoint, network, identity, and Microsoft 365 security reviews.
• Help verify that systems are configured according to established security standards.
• Assist with user access reviews, account management, and access‑control documentation.
• Participate in periodic reviews of security logs, audit records, and security configurations.
• Assist with identifying and documenting potential security risks.
• Collect and organize evidence demonstrating implementation of cybersecurity controls.
• Maintain compliance evidence repositories and control documentation.
• Create screenshots, reports, configuration records, and other artifacts required to demonstrate control implementation.
• Maintain accurate records of assets, users, systems, applications, and security controls.
• Assist with documenting IT processes and standard operating procedures.
• Assist with cybersecurity awareness and training initiatives.
• Help develop security communications and educational materials for employees.
• Support phishing‑awareness and other security‑awareness activities.
• Promote secure handling of company and sensitive information.
• Assist the IT team with cybersecurity‑related projects and initiatives.
• Participate in IT infrastructure and security assessments.
• Assist with hardware and software inventory activities.
• Support implementation of security improvements and remediation efforts.
• Perform other cybersecurity and IT‑related duties as assigned.

Skills

Cybersecurity basics

Attention to detail

Documentation

Analytical thinking

Independent working

Education

Cybersecurity/IT/CS degree or certificate

Tools

Microsoft 365

Entra ID/Azure AD

Windows

Endpoint security

Networking

Job description

AIRO Group in Phoenix, AZ seeks a Cybersecurity & Compliance Intern (Part-Time) to support the IT team in strengthening cybersecurity and compliance programs. The role offers hands‑on experience with NIST SP 800-171, CMMC, and security operations, reporting, and documentation, working closely with the IT Director and staff.

The intern will assist with controls, risk assessment, vulnerability management, and security reviews across endpoints, networks, and Microsoft 365 while promoting secure