Cybersecurity & Compliance Intern

AIRO Group Holdings, Inc. • Phoenix, AZ

13h • $20 - $24 • Onsite

About The Position

We are seeking a motivated Cybersecurity & Compliance Intern to support the Information Technology team in strengthening the organization’s cybersecurity and compliance program. The ideal candidate will have a foundational understanding of cybersecurity principles and familiarity with NIST Cybersecurity Framework, NIST SP 800-171, and/or Cybersecurity Maturity Model Certification (CMMC) requirements. This position will provide hands-on experience supporting cybersecurity controls, documentation, security assessments, evidence collection, vulnerability management, asset management, and compliance activities. The intern will work closely with the IT Director and other IT personnel to help implement and document security practices across the organization.

Requirements

• Currently pursuing or recently completed a degree or certificate in Cybersecurity, Information Technology, Computer Science, Information Assurance, or a related field.
• Foundational understanding of cybersecurity principles.
• Familiarity with NIST SP 800-171, NIST 800-53, NIST Cybersecurity Framework, CMMC, or similar security frameworks.
• Strong attention to detail and organizational skills.
• Ability to document technical information clearly and accurately.
• Strong analytical and problem-solving skills.
• Ability to handle confidential information appropriately.
• Ability to work independently while knowing when to ask questions.

Nice To Haves

• Coursework, training, or certification related to NIST, CMMC, cybersecurity, or information security.
• Familiarity with the 14 CMMC/NIST SP 800-171 control families, including: Access Control, Awareness and Training, Audit and Accountability, Configuration Management, Identification and Authentication, Incident Response, Maintenance, Media Protection, Personnel Security, Physical Protection, Risk Assessment, Security Assessment, System and Communications Protection, System and Information Integrity.
• Experience with Microsoft 365, Entra ID/Azure AD, Windows, endpoint security, or networking.
• Familiarity with vulnerability management, patch management, MFA, least privilege, or security logging.
• Experience working with spreadsheets, ticketing systems, documentation platforms, or compliance-management tools.
• Security-related certifications such as Security+, Network+, ISC2 CC, or equivalent are a plus.

Responsibilities

• Assist with implementation and documentation of NIST SP 800-171 and CMMC security controls.
• Review existing policies, procedures, and technical configurations against applicable NIST/CMMC requirements.
• Help maintain a System Security Plan (SSP) and supporting compliance documentation.
• Assist with developing and maintaining Plans of Action & Milestones (POA&Ms) where applicable.
• Research NIST, CMMC, DoD, and related cybersecurity requirements and translate requirements into actionable IT tasks.
• Assist with preparing documentation and evidence for internal assessments and future CMMC assessments.
• Track control implementation status and identify missing documentation or evidence.
• Assist with vulnerability and patch management activities.
• Review security alerts, endpoint security information, and other cybersecurity monitoring data.
• Assist with endpoint, network, identity, and Microsoft 365 security reviews.
• Help verify that systems are configured according to established security standards.
• Assist with user access reviews, account management, and access-control documentation.
• Participate in periodic reviews of security logs, audit records, and security configurations.
• Assist with identifying and documenting potential security risks.
• Collect and organize evidence demonstrating implementation of cybersecurity controls.
• Maintain compliance evidence repositories and control documentation.
• Create screenshots, reports, configuration records, and other artifacts required to demonstrate control implementation.
• Maintain accurate records of assets, users, systems, applications, and security controls.
• Assist with documenting IT processes and standard operating procedures.
• Assist with cybersecurity awareness and training initiatives.
• Help develop security communications and educational materials for employees.
• Support phishing-awareness and other security-awareness activities.
• Promote secure handling of company and sensitive information.
• Assist the IT team with cybersecurity-related projects and initiatives.
• Participate in IT infrastructure and security assessments.
• Assist with hardware and software inventory activities.
• Support implementation of security improvements and remediation efforts.
• Perform other cybersecurity and IT-related duties as assigned.

Benefits

• Paid Time Off (PTO)
• Paid Holidays
• Parental Leave
• Medical, Dental, Vision Insurance
• Health Savings Account (HSA)
• 401(k) with company match
• Employee Assistance Program (EAP)
• Commuter Benefits
• Basic Life Insurance – fully paid by the company for employees and their dependents
• Long-Term Disability Insurance – fully paid by the company
• Voluntary Short-Term Disability Insurance
• Supplemental Life Insurance options

What This Job Offers

• Job Type: Full-time
• Career Level: Intern
• Education Level: Associate degree