Information Security Governance Intern

Zoox•Foster City, CA

10d

About The Position

Zoox’s internship program provides hands-on experiences with state of the art technology, mentorship from some of the industry's brightest minds, and the opportunity to play a part in our success. Internships at Zoox are reserved for those who demonstrate outstanding academic performance, activities outside their course work, aptitude, curiosity, and a passion for Zoox's mission. In this Role, You will collaborate with the ISG team to support the following areas: Governance Operations: Support day-to-day governance operations related to policies, standards, procedures, security requirements, and associated documentation. Data & Reporting: Assist in the collection and management of data from multiple systems to help report on Information Security program effectiveness through risk analysis and trends. Documentation: Help collect data, compose reports, and draft or improve information security policies, standards, technical implementation guidelines, and job aids. Core ISG Practices: Participate in one or more of ISG’s core practices, including Policies & Standards, Risk Management, Third Party-Risk Management, and Information Security Awareness & Training. Stakeholder Engagement: Work alongside business partners and stakeholders to gather relevant input for company documentation and learn how to securely enable the business.

Requirements

Currently working towards a B.S., M.S., Ph.D., or advanced degree in an Information Security, Cybersecurity, Business Administration, Information Systems, or a related field program
Good academic standing
Able to commit to a 12-week internship beginning in May or June of 2026.
At least one previous industry internship, co-op, or project completed in a relevant area
Ability to relocate to the Bay Area, California for the duration of the internship
Interns at Zoox may not use any proprietary information they are working on as part of their thesis, any published work with their university, or to be distributed to anyone outside of Zoox
Basic understanding of, or a strong desire to learn, information security frameworks such as NIST 800-53, NIST-CSF, ISO 27001, and CIS controls.
Fundamental knowledge of risk management, security, and privacy practices.
Strong written and verbal communication skills, with the ability to articulate complex concepts clearly.
Familiarity with standard office productivity tools; familiarity with the administration and operation of GRC tools is a plus.
Classroom or project exposure to SOC2 and Trust Service Criteria assessments is preferred but not required.

Nice To Haves

An ideal candidate who is organized, detail-oriented, and eager to understand how to apply security governance in a real-world environment.
A proactive learner willing to support internal stakeholders and provide consultations under the guidance of senior team members.

Responsibilities

Support day-to-day governance operations related to policies, standards, procedures, security requirements, and associated documentation.
Assist in the collection and management of data from multiple systems to help report on Information Security program effectiveness through risk analysis and trends.
Help collect data, compose reports, and draft or improve information security policies, standards, technical implementation guidelines, and job aids.
Participate in one or more of ISG’s core practices, including Policies & Standards, Risk Management, Third Party-Risk Management, and Information Security Awareness & Training.
Work alongside business partners and stakeholders to gather relevant input for company documentation and learn how to securely enable the business.