GRC & InfoSec Intern: Risk, Policy & Audit

Minnesota League of Credit Unions; Northern (KY); Hybrid; USD 25,000 - 33,000; Part time

Job summary

The Minnesota League of Credit Unions is seeking an Information Security/GRC intern to support the Information Security Director and GRC functions. The role offers hands-on exposure to vendor risk management, policy governance, audit support, and business continuity planning while helping the team operate efficiently.

You will work 15–20 hours per week on-site at our St. Paul, MN office during the academic year, with scheduling flexibility to fit coursework.

Qualifications

• Minimum High School degree or equivalent.
• Currently pursuing an Associate’s or Bachelor’s degree in Information Security, Information Technology, Business, Risk Management, or a related field; recent graduates also considered.
• Coursework, projects, or prior experience related to information security, risk, compliance, or IT is preferred.
• Interest in pursuing security or compliance certifications (e.g., CompTIA Security+, ISACA CRISC, or similar) is a plus.

Responsibilities

• Assist with vendor risk management activities, including intake, due diligence, collection of SOC 2 reports, and tracking of vendor tier classifications
• Support the review and organization of security policies, standards, and procedures, including formatting, version control, and redline preparation
• Help gather and organize audit and examiner artifacts for internal audits, NCUA exams, and third‑party assessments
• Maintain risk registers, control libraries, and compliance trackers to keep records current and accurate
• Support business continuity management (BCM) activities, including department intake, business impact analysis data entry, and plan documentation
• Assist with control testing and evidence collection to validate that security controls are operating as intended
• Research regulatory requirements and industry frameworks (e.g., NIST CSF, GLBA, FFIEC) and summarize findings for the team
• Track open risk and remediation items and follow up with owners on status
• Support routine GRC operations such as tracking security awareness metrics and maintaining shared documentation

Skills

Vendor risk

Policy governance

Audit support

Business continuity

GRC operations

Microsoft Office

Documentation

Regulatory knowledge

Education

High School diploma or equivalent

Associate’s/Bachelor’s in Information Security/IT/Business/Risk Management

Tools

GRC tools

Job description

The Minnesota League of Credit Unions is seeking an Information Security/GRC intern to support the Information Security Director and GRC functions. The role offers hands-on exposure to vendor risk management, policy governance, audit support, and business continuity planning while helping the team operate efficiently.

You will work 15–20 hours per week on-site at our St. Paul, MN office during the academic year, with scheduling flexibility to fit coursework.