About the internship
Datamaran is building its AI governance framework and strengthening its compliance operations at the same time, and you'll be part of both. You'll join our Cybersecurity & Risk Governance team to map how teams use generative AI, draft the policies that govern it, and keep our audit evidence ready for our SOC 2 Type 2 and ISO audits. This is the foundation of how the company manages AI risk, and every deliverable is reviewed and put to use.

In this role, you will:

• Interview departments about their use of generative AI, and build and maintain our Shadow AI risk registry

• Draft acceptable use policies and gap analyses against NIST AI RMF, ISO/IEC 42001 and the EU AI Act, and support AI impact assessments

• Collect and organise compliance evidence in Drata for our SOC 2 Type 2 and ISO audits

• Run third-party vendor risk reviews, update security questionnaires and maintain the operational risk register

What you'll learn
You'll get hands-on experience with enterprise GRC workflows and compliance tooling like Drata in a specialised, international team. Every policy draft and gap analysis you write gets direct feedback before it's put to use.

Who we're looking for
You will thrive here if you:

• Are following an HBO or WO programme, in cybersecurity, risk management, law, ESG, compliance, technology policy or a related field

• Are organised and analytical, with sharp attention to detail and strong policy writing skills

• Speak and write fluent English

• Have an interest in or knowledge of frameworks such as ISO 27001, GDPR, SOC 2, ISO/IEC 42001 or NIST AI RMF