GRC Intern: Risk, Policy & Audit Support

Blaze Credit Union; Northern (KY); Hybrid; USD 24,000 - 34,000; Part time

Job summary

Blaze Credit Union is offering a part-time, on-site Information Security/GRC internship at our St. Paul, MN office. The role supports the Information Security Director and the GRC function, gaining hands-on exposure to vendor risk management, policy governance, audit support, and business continuity.

You will help maintain risk registers and artifacts, assist with control testing, and learn regulatory requirements (NIST CSF, GLBA, FFIEC) while supporting routine GRC operations.

Qualifications

• Familiarity with basic information security, risk, and compliance concepts.
• Awareness of data privacy regulations (GLBA, GDPR, CCPA/CPRA) is a plus.
• Proficiency with Word/Excel/PowerPoint; basic GRC tools experience a plus.

Responsibilities

• Assist with vendor risk management activities and due diligence.
• Support policy governance, standards, and version control.
• Gather audit artifacts for internal audits, NCUA exams, and third‑party assessments.
• Maintain risk registers and compliance trackers to keep records current.
• Support business continuity management activities and BCM data entry.
• Assist with control testing and evidence collection.
• Research regulatory requirements (NIST CSF, GLBA, FFIEC) and summarize findings.
• Track open risk and remediation items and follow up with owners.
• Support routine GRC operations such as security awareness metrics.

Skills

Attention to detail

Proactive learner

Communication skills

Education

Bachelor's in information security or related field

Tools

Microsoft Office

Job description

Blaze Credit Union is offering a part-time, on-site Information Security/GRC internship at our St. Paul, MN office. The role supports the Information Security Director and the GRC function, gaining hands-on exposure to vendor risk management, policy governance, audit support, and business continuity.

You will help maintain risk registers and artifacts, assist with control testing, and learn regulatory requirements (NIST CSF, GLBA, FFIEC) while supporting routine GRC operations.