GRC & Risk Advisory Intern — Remote

Echelon Cyber; Washington (District of Columbia); Hybrid; USD 21,000 - 28,000; Full time

Benefits offered by this job

Hands-On Experience

Mentorship

Innovative Environment

Career Advancement

Collaborative Culture

Job summary

Echelon Risk + Cyber is seeking a Risk Advisory GRC Intern to support governance, risk, and compliance engagements while learning how organizations build and improve security programs.

You will work on real client engagements, assist with policy development, third‑party risk, and AI governance, and gain exposure to frameworks such as NIST, ISO, SOC 2, and CMMC in a remote-first, multinational team.

Qualifications

• Pursuing a degree in IT, Cybersecurity, Business, Finance, or related field.
• Advanced proficiency in English (verbal and written).
• Strong organizational and analytical skills.
• Ability to work in a remote-first, multinational team.
• Authorized to work in the United States without visa sponsorship.

Responsibilities

• Support control, gap, and maturity assessments aligned to major frameworks.
• Gather, organize, and analyze client evidence; document support for each control.
• Draft assessment workpapers and report sections under guidance of senior consultants.
• Help build and maintain risk registers, remediation plans, and maturity roadmaps.
• Assist with drafting and reviewing security policies, standards, and procedures.
• Support third-party risk management; vendor questionnaires and reviews.
• Learn how GRC platforms like Vanta and Drata are used for controls and audit readiness.
• Gain exposure to AI governance work and ISO frameworks.

Skills

GRC knowledge

Cybersecurity basics

English proficiency

Remote collaboration

Analytical thinking

Education

Pursuing IT/Cybersecurity/Business/Finance degree

Tools

Vanta

Drata

Job description

Echelon Risk + Cyber is seeking a Risk Advisory GRC Intern to support governance, risk, and compliance engagements while learning how organizations build and improve security programs.

You will work on real client engagements, assist with policy development, third‑party risk, and AI governance, and gain exposure to frameworks such as NIST, ISO, SOC 2, and CMMC in a remote-first, multinational team.