IS Governance, Risk & Compliance Intern

Description Role: This role supports the Information Security Director and the Governance, Risk and Compliance (GRC) function in maintaining a strong control environment, advancing risk and compliance activities, and building foundational security skills. The intern gains hands-on exposure to vendor risk management, policy governance, audit and exam support, and business continuity while helping the team operate efficiently.

Job Type: Part time, on-site at our administrative office in St. Paul, MN. Interns will work 15–20 hours per week during the academic year. Weekly hours are determined by departmental needs, with flexibility provided to accommodate academic schedules.

Major Duties and Responsibilities Assist with vendor risk management activities, including intake, due diligence, collection of SOC 2 reports, and tracking of vendor tier classifications Support the review and organization of security policies, standards, and procedures, including formatting, version control, and redline preparation Help gather and organize audit and examiner artifacts for internal audits, NCUA exams, and third-party assessments Maintain risk registers, control libraries, and compliance trackers to keep records current and accurate Support business continuity management (BCM) activities, including department intake, business impact analysis data entry, and plan documentation Assist with control testing and evidence collection to validate that security controls are operating as intended Research regulatory requirements and industry frameworks (e.g., NIST CSF, GLBA, FFIEC) and summarize findings for the team Track open risk and remediation items and follow up with owners on status Support routine GRC operations such as tracking security awareness metrics and maintaining shared documentation

Other Duties Participate in business continuity, incident management, and recovery planning and exercise efforts Comply with applicable laws and regulations, including but not limited to the B