AI Governance & Risk Compliance Internship
Build our AI governance framework: map how teams use generative AI, draft the policies and keep audit evidence ready for SOC 2 Type 2 and ISO. Every deliverable gets used.
We usually respond within a week
About the internship
We are building our AI governance framework and strengthening our compliance operations at the same time, and you'll be part of both. You'll join our Cybersecurity & Risk Governance team to map how teams use generative AI, draft the policies that govern it, and keep our audit evidence ready for our SOC 2 Type 2 and ISO audits. This is the foundation of how we manage AI risk, and every deliverable is reviewed and put to use.
In this role, you will:
Interview departments about their use of generative AI, and build and maintain our Shadow AI risk registry
Draft acceptable use policies and gap analyses against NIST AI RMF, ISO/IEC 42001 and the EU AI Act, and support AI impact assessments
Collect and organize compliance evidence in Drata for our SOC 2 Type 2 and ISO audits
Run third-party vendor risk reviews, update security questionnaires and maintain the operational risk register
What you'll learn
You'll get hands-on experience with enterprise GRC workflows and compliance tooling like Drata in a specialized, international team. Every policy draft and gap analysis you write gets direct feedback before it's put to use.
Who we're looking for
You will thrive here if you:
Are following a bachelor's or master's program, in cybersecurity, risk management, law, ESG, compliance, technology policy or a related field
Are organized and analytical, with sharp attention to detail and strong policy writing skills
Speak and write fluent English
Have an interest in or knowledge of frameworks such as ISO 27001, GDPR, SOC 2, ISO/IEC 42001 or NIST AI RMF
- Department
- IT Operations
- Role
- Cybersecurity & Risk Governance
- Location
- Leeuwarden
- Remote status
- Hybrid
- Employment type
- Internship
- Working hours
- 20 hours per week
- Starting date
- February 01, 2027
Colleagues
Internship benefits
-
Monthly stipend
€750 per month at 40 hours a week, pro-rated for fewer hours.
-
Flexible hours
You largely choose which hours and days you work, in consultation with your team.
-
Hybrid from day one
One to two days a week at our Leeuwarden hub, the rest is up to you.
-
Room for a thesis
Writing a thesis alongside your internship is fine, on your own time.
-
An international team
English is our working language, and many of your colleagues are international too.
-
A real path forward
Some of our interns stay on. Ben Homola started as an intern in our Leeuwarden data team and is now a Data Operations Coordinator.
Inside Datamaran
Four offices, one loop: pick up a signal, work out what it means, decide what to do with it.
Leeuwarden
About Datamaran
Datamaran is the AI-powered governance platform for enterprise.
Regulations change. Stakeholders shift. Markets move. Large organizations are expected to hold a clear, defensible position on all of it, and most still get there through slow manual work on fragmented signals.
We turn regulatory, stakeholder and market signals into intelligence that leadership teams can act on, built on 12+ years of expertise in non-financial risk. Risk, legal, compliance, sustainability and corporate affairs teams at Bridgestone, Dell, Cisco, Kraft Heinz and PepsiCo use Datamaran to decide what matters, and to stand behind that decision afterwards.
We are 104 people across the UK, US, Spain and the Netherlands.
Know what's coming. Act on it.