Information Security Governance, Risk & Compliance Intern

Shureorporated•Niles, IL

4d•Onsite

About The Position

The Information Security Governance, Risk & Compliance (GRC) Intern will support Shure's cybersecurity governance and risk management initiatives. This role provides hands-on experience in information security, compliance, risk assessment, security awareness, and IT audit activities. The intern will work closely with the Information Security and GRC teams to help strengthen security processes, support compliance efforts, and contribute to ongoing cybersecurity improvement initiatives across the organization. This Internship is Onsite in Niles, IL.

Requirements

In process of a Bachelor's or Advanced degree in Cybersecurity, Information Technology, Information Systems, Computer Science, Risk Management, Business, or a related field.
Completion of at least two years of undergraduate coursework prior to the internship start date.
Strong interest in cybersecurity, risk management, compliance, auditing, or information governance.
Strong analytical, organizational, and problem-solving skills.
Excellent written and verbal communication skills with the ability to present technical concepts to diverse audiences.
Proficiency with Microsoft Office applications, including Excel, PowerPoint, and Word.
Ability to manage multiple assignments, prioritize tasks, and meet deadlines.
Applicants for this position must be currently authorized to work in the United States on a full-time basis. Shure will not sponsor applicants for this position for work visas.

Nice To Haves

Familiarity with cybersecurity frameworks such as NIST Cybersecurity Framework, NIST 800-53, SOC 2, or related standards is preferred.

Responsibilities

Assist with cybersecurity governance, risk, and compliance (GRC) activities, including policy management and control documentation.
Support the maintenance of the enterprise risk register by tracking risks, mitigation plans, and remediation activities.
Participate in third-party risk management activities, including vendor security assessments and documentation reviews.
Assist with security awareness and training initiatives, including campaign planning, metrics reporting, and communication development.
Support compliance programs and audits by gathering evidence, tracking action items, and maintaining documentation.
Analyze and report on vulnerability management metrics and remediation progress across technology teams.
Assist in maintaining cybersecurity policies, standards, and procedures aligned with industry frameworks and organizational requirements.
Develop dashboards, reports, and presentations to communicate cybersecurity risk and compliance status to stakeholders.