Risk Advisory GRC Intern - Remote (Mexico)

Echelon Risk + Cyber

1d • Remote

About The Position

Echelon Risk + Cyber is hiring a Risk Advisory GRC Intern for its Summer 2027 Internship Program. The internship runs from June 7, 2027, through August 12, 2027, and requires approximately 20–25 hours per week. The intern will support governance, risk, and compliance engagements while learning how organizations build, measure, and improve security programs. The work includes real client engagements alongside experienced consultants, spanning readiness assessments, gap analyses, policy development, third-party risk, and AI governance across industries including healthcare, financial services, higher education, and the defense industrial base.

The intern will gain practical exposure to security frameworks, evidence analysis, risk assessment, client communications, and GRC platforms. This is a remote-first opportunity for a university student in their final three semesters. Applicants must be authorized to work in Mexico without current or future visa sponsorship, and only resumes in English will be considered. Compensation is $15–$20 USD per hour, depending on relevant experience. The position is expected to require availability for at least 20 hours per week during 8 AM–5 PM CST, Monday through Friday.

Requirements

• Currently pursuing a degree in IT, Cybersecurity, Business, Finance, or a related field.
• University student in the final three semesters.
• Strong interest in risk advisory and GRC, with a foundational understanding of cybersecurity principles.
• Advanced English proficiency, both verbal and written; English level C1/C2.
• Strong organizational skills to manage multiple projects and priorities.
• Attention to detail and strong analytical and problem-solving skills, including comfort reading dense control language and evaluating evidence.
• Excellent communication skills and ability to tailor messages to diverse audiences.
• Comfort working independently in a remote-first, multinational team.
• Aspiration to work in the cybersecurity industry within the next two years.
• Availability to work a minimum of 20 hours per week during 8 AM–5 PM CST, Monday through Friday.
• Authorization to work in Mexico without current or future visa sponsorship.
• Submit a resume in English.

Nice To Haves

• Exposure to security or risk frameworks such as NIST, ISO 27001, CIS, SOC 2, or PCI.
• Familiarity with GRC tools or audit and compliance processes.
• Internship, academic project, or coursework related to cybersecurity, IT risk, audit, or compliance.
• Working knowledge of Microsoft Excel and Word for documentation and tracking.

Responsibilities

• Support control, gap, and maturity assessments aligned to cybersecurity and compliance frameworks.
• Gather, organize, and analyze client evidence, documenting how it supports or fails to support controls.
• Draft assessment workpapers and report sections under senior consultants’ guidance.
• Help build and maintain risk registers, remediation plans, and maturity roadmaps.
• Assist with drafting and reviewing security policies, standards, and procedures.
• Support third-party risk management, including vendor questionnaires and review of vendor documentation.
• Learn to use GRC platforms such as Vanta and Drata to track controls, evidence, and audit readiness.
• Gain exposure to AI governance assessments aligned with NIST AI RMF and ISO 42001.
• Shadow consultants on client calls and interviews to learn how engagements are scoped, conducted, and communicated.
• Participate in internal team meetings covering engagement planning, risk discussions, and advisory approaches.
• Research cybersecurity trends, frameworks, and regulatory requirements, and share findings with the team.
• Assist leadership with proposals, internal process improvement, and thought leadership content such as blog posts and knowledge sharing.

Benefits

• Hands-on experience working alongside industry experts on real client engagements.
• Mentorship and guidance from seasoned professionals.
• Innovative environment that values new ideas and creative problem-solving.
• Career advancement through exposure to cybersecurity and risk management practices.
• Collaborative culture emphasizing teamwork and knowledge-sharing.

What This Job Offers

• Job Type: Part-time
• Career Level: Intern
• Education Level: No Education Listed