MBA Internship – GRC, Information Security Strategy and Assurance

About the role

The firm is seeking MBA interns to support ongoing and upcoming projects in Governance, Risk & Compliance (GRC), Information Security Strategy and Assurance Services. The internship gives hands-on experience across internal organizational initiatives, group-level governance programmes and external client consulting engagements covering ISO, SOC and other regulatory frameworks. It also offers exposure to building information security and governance strategies for greenfield organisations.

Key responsibilities

• Take part in strategic consulting assignments creating information security frameworks and governance blueprints for greenfield environments
• Help develop and implement information security and governance frameworks
• Support risk assessment, mitigation planning and reporting
• Take part in compliance and assurance activities under ISO 27001, ISO 22301, ISO 27701, ISO 42001, SOC 2 and NIST
• Contribute to audit preparation, policy documentation and control verification
• Research emerging regulations, standards and data privacy laws
• Help prepare dashboards, reports and presentations for management and client reviews
• Coordinate with internal teams and external stakeholders

Required profile

• MBA (preferred specialisation in Business Administration, Information Systems, Operations or Risk Management)
• Basic exposure to IT, cybersecurity or IT governance concepts
• Strong analytical and research skills, and excellent written and verbal communication
• Ability to work independently in a structured, process-driven environment

Required skills

• Proficiency in MS Office tools (Word, Excel, PowerPoint)
• Desirable: knowledge of GRC frameworks (ISO 27001, SOC 2, NIST) and of information security strategy, risk management and business continuity
• Desirable: curiosity about AI governance, data protection and emerging compliance trends

Interns showing strong capability and interest may be considered for pre-placement offers or long-term consulting roles after completion. Evaluation is based on academic background, interest in IT and governance, communication and analytical abilities, and performance in interviews and case discussions.