AI Governance & Risk Compliance Internship
Build our AI governance framework: map how teams use generative AI, draft the policies and keep audit evidence ready for SOC 2 Type 2 and ISO. Every deliverable gets used.
We usually respond within a week
About the internship
We are building our AI governance framework and strengthening our compliance operations at the same time, and you'll be part of both. You'll join our Cybersecurity & Risk Governance team to map how teams use generative AI, draft the policies that govern it, and keep our audit evidence ready for our SOC 2 Type 2 and ISO audits. This is the foundation of how we manage AI risk, and every deliverable is reviewed and put to use.
In this role, you will:
Interview departments about their use of generative AI, and build and maintain our Shadow AI risk registry
Draft acceptable use policies and gap analyses against NIST AI RMF, ISO/IEC 42001 and the EU AI Act, and support AI impact assessments
Collect and organize compliance evidence in Drata for our SOC 2 Type 2 and ISO audits
Run third-party vendor risk reviews, update security questionnaires and maintain the operational risk register
What you'll learn
You'll get hands-on experience with enterprise GRC workflows and compliance tooling like Drata in a specialized, international team. Every policy draft and gap analysis you write gets direct feedback before it's put to use.
Who we're looking for
You will thrive here if you:
Are following a bachelor's or master's program, in cybersecurity, risk management, law, ESG, compliance, technology policy or a related field
Are organized and analytical, with sharp attention to detail and strong policy writing skills
Speak and write fluent English
Have an interest in or knowledge of frameworks such as ISO 27001, GDPR, SOC 2, ISO/IEC 42001 or NIST AI RMF
- Department
- IT Operations
- Role
- Cybersecurity & Risk Governance
- Location
- Leeuwarden
- Remote status
- Hybrid
- Employment type
- Internship
- Working hours
- 20 hours per week
Benefits
What you get as an intern
- Monthly stipend€750 a month at 40 hours a week, pro-rated for fewer hours
- Your own hours20 to 40 hours a week, and you largely choose which hours and days
- Hybridone to two days a week at our Leeuwarden hub, the rest is up to you
- Regular 1:1swith your supervisor, to set priorities and get direct feedback
- Room for your thesisthe subject can come from your work here, the writing happens outside office hours
- A way ininterns have stayed on after their internship, like Ben in our data team
Your recruiter
Elske de Bruin
Workplace Experience Manager
Elske reviews every internship application herself, runs the first call with you and keeps you posted after each step. She stays your contact until your first day in our Leeuwarden office.
How it works
- 1You applyIt takes about ten minutes.
- 2Elske reviews itYou hear from her within a week.
- 3You meet your supervisorA conversation with the person you would work with.
- 4A short assessmentNo more than an hour.
Can you apply?
Six things need to be true for this internship. Tick them off before you write your cover letter.
All six? Then you can apply. We look forward to reading your application.
One of them a no? Then we cannot take your application forward this round, however strong it is. We run new internship rounds regularly.
Join the next cohort
Five months of real work in Leeuwarden, starting 1 February 2027. Applying takes about ten minutes.
About Datamaran
Datamaran is the AI-powered governance platform for enterprise.
Regulations change. Stakeholders shift. Markets move. Large organizations are expected to hold a clear, defensible position on all of it, and most still get there through slow manual work on fragmented signals.
We turn regulatory, stakeholder and market signals into intelligence that leadership teams can act on, built on 12+ years of expertise in non-financial risk. Risk, legal, compliance, sustainability and corporate affairs teams at Bridgestone, Dell, Cisco, Kraft Heinz and PepsiCo use Datamaran to decide what matters, and to stand behind that decision afterwards.
We are 100+ people across the UK, US, Spain and the Netherlands.
Know what's coming. Act on it.