AI Governance Associate (2027 Summer Internship)

risk3sixty • Roswell, GA

11d

About The Position

This is a build-focused internship inside a growing practice at risk3sixty, a U.S.-based security and compliance firm. The AI governance practice is expanding into new frameworks, and this role will help build the structure behind this growth. The intern will contribute to developing defined offerings and supporting materials for AI governance, focusing on frameworks like NIST AI RMF, EU AI Act, and agentic AI governance frameworks. The role also involves enhancing the ethOS consulting team template library and participating in live client engagements to ensure the improvements made reflect real-world application.

Requirements

• Strong research skills and comfort reading dense technical standards, with the ability to pull out what matters and turn it into something practitioners can use.
• Clear, organized writing, clean enough to go to clients with minimal editing.
• Basic familiarity with core AI/ML concepts (how models are built, deployed, and monitored) enough to follow technical conversations.
• Basic familiarity with AI risk and governance concepts, including the AI system lifecycle, enough to discuss AI governance without getting lost.
• Some exposure to GRC, compliance, risk management, or consulting, through coursework, prior work, or genuine self-directed interest.
• Comfort in Microsoft 365 (Word, Excel, SharePoint).
• Detail-oriented and self-directed, since much of the materials work requires careful reading of how framework requirements connect.

Nice To Haves

• Prior exposure to ISO standards (ISO 27001, ISO 42001, ISO 27701, ISO 9001, or similar).
• Familiarity with the EU AI Act or NIST AI RMF.
• Exposure to AI ethics or governance coursework.
• Interest in cybersecurity policy

Responsibilities

• Research AI governance frameworks (NIST AI RMF, EU AI Act, AIUC-1) and map their requirements against existing risk3sixty methodology to find the gaps.
• Build initial templates and scoping tools to take each new offering to a client.
• Expand the ethOS consulting team template library across AI governance policies, risk management documentation, assessment toolkits, and scoping guides.
• Add customization guidance to documentation templates based on AI system lifecycle role (Provider, Developer, User), scope, and applicable framework.
• Support live AI governance consulting engagements and feed real client experience back into the materials.

Benefits

• Working knowledge of ISO 42001: its structure, how it plays out differently across the AI system lifecycle roles, and what auditors look for at Stage 1 and Stage 2.
• Consulting delivery experience, seeing an engagement run from the inside, from evidence-gathering and audit testing to how findings get documented and client interactions are managed.
• Practical fluency in the NIST AI RMF and the EU AI Act, including where they overlap with ISO 42001 and what it takes to build an advisory offering around each.
• New offering development experience: taking a regulatory framework and turning it into a deliverable service.
• The core consulting skill of standards-to-practice translation, reading normative language and producing something an organization can implement and audit against.
• A real view of where AI governance is heading and what is driving enterprise demand, from a firm that works in this space every day.

What This Job Offers

• Career Level: Intern
• Education Level: No Education Listed