Governance, Risk & Compliance Intern

Governance, Risk & Compliance Intern

In-office (Vancouver, BC) | Paid Internship | $22.50 CAD per hour | Starts July 1, 2026 or later (4 months)

The Role

We're hiring a GRC Intern to support client engagements across compliance audits and vendor assessments. This isn't a shadowing role - you'll do real work on real client files from day one, with mentorship from senior consultants who will help you build a foundation that most people spend years trying to find.

By the end of the internship, success looks like: you understand the audit cycle end-to-end, you're contributing to active audits and client-related projects without being hand-held on every step, and clients are comfortable working with you directly.

Eligibility

• Enrolled full or part-time at an eligible Canadian college or university ( https://www.canada.ca/en/employment-social-development/programs/designated-schools.html)
• Enrolled for at least the first 30 days of the internship
• Holds Canadian citizenship, Permanent Residency, or refugee status (International students are not eligible)

What You’ll Do

• Support compliance audit engagements, including evidence gathering, control testing, and gap identification
• Assist with vendor security questionnaires under consultant guidance
• Draft compliance policies, procedures, and supporting documentation
• Help maintain audit trackers, evidence repositories, and client workspaces
• Research regulatory and framework requirements and summarize findings for the team
• Participate in client calls and internal reviews to build communication and consulting skills

Who We’re Looking For

• Studying business, information technology, computer science, or a related field
• Genuine interest in cybersecurity, compliance, or risk
• Detail-oriented and organized, comfortable managing multiple tasks without letting things slip
• Clear communicator, both in writing and in conversation
• Comfortable working in ambiguous situations and asking good questions when you need direction
• Familiar with (or eager to learn) frameworks like SOC 2 and ISO 27001 at a conceptual level

Bonus Points For

• Any exposure to GRC platforms (Drata, Vanta, or similar)
• Experience working with startup companies or carrying out technical research
• Prior internship or co-op in a compliance, audit, or security environment

What You’ll Gain

• Hands-on experience across real client audit engagements from day one
• Mentorship from senior compliance consultants working across multiple frameworks
• A working understanding of compliance frameworks and vendor security programs
• Client-facing experience and professional communication skills
• A portfolio of real work to speak to in future interviews

How to Apply

Send your resume, a short note about why you’re interested, and any relevant links (LinkedIn, portfolio, GitHub) to:

***email_hidden***

Subject: GRC Intern Application