Remote GRC Risk Advisory Intern

Echelon Risk + Cyber; Washington (District of Columbia); Remote; USD 16,000 - 26,000; Full time

Benefits offered by this job

Hands-On Experience

Mentorship

Innovative Environment

Career Advancement

Collaborative Culture

Job summary

Echelon Risk + Cyber invites university students in their final three semesters for a Summer 2027 Risk Advisory GRC Internship. You will support governance, risk, and compliance engagements while learning how frameworks, evidence, and risk analysis produce actionable client assessments across industries.

You will work on real client engagements alongside experienced consultants, learning how to build and measure security programs, policies, and third-party risk management.

Qualifications

• Pursuing a degree in IT, Cybersecurity, Business, Finance, or related field.
• Advanced proficiency in English (verbal and written).
• Strong organizational and multi-project management skills.
• Attention to detail with analytical and problem-solving abilities.

Responsibilities

• Support control, gap, and maturity assessments against frameworks such as NIST CSF, NIST 800-171, ISO 27001, SOC 2, HIPAA, PCI DSS, CIS Controls, and CMMC.
• Gather, organize, analyze client evidence and document how it supports or fails to support each control.
• Draft assessment workpapers and report sections under the guidance of senior consultants, with attention to clear and accurate writing.
• Help build risk registers, remediation plans, and maturity roadmaps.
• Assist with drafting and reviewing security policies, standards, and procedures.
• Support third-party risk management work, including vendor questionnaires and review of vendor documentation.
• Learn how GRC platforms such as Vanta and Drata are used to track controls, evidence, and audit readiness.
• Gain exposure to AI governance work, including NIST AI RMF and ISO 42001 aligned assessments.
• Shadow consultants on client calls and interviews to learn how engagements are scoped, run, and communicated.
• Participate in internal team meetings to learn engagement planning, risk discussions, and advisory approaches.
• Research cybersecurity trends, frameworks, and regulatory requirements, and share what you learn with the team.
• Assist leadership with proposals, internal process improvement, and thought leadership content such as blog posts and knowledge sharing.

Skills

Risk advisory

GRC

English proficiency

Organization skills

Analytical thinking

Communication skills

Remote work readiness

Education

Pursuing IT/Cybersecurity/Business/Finance degree

Tools

Vanta

Drata

Job description

Echelon Risk + Cyber invites university students in their final three semesters for a Summer 2027 Risk Advisory GRC Internship. You will support governance, risk, and compliance engagements while learning how frameworks, evidence, and risk analysis produce actionable client assessments across industries.

You will work on real client engagements alongside experienced consultants, learning how to build and measure security programs, policies, and third-party risk management.