Cybersecurity Intern

About the Role
We are looking for a passionate and motivated Cybersecurity Intern to join our Information Security team. The internship offers hands-on exposure to cybersecurity, privacy, governance, risk management, vulnerability management, and regulatory compliance.

Key Responsibilities
● Support Information Security Governance, Risk & Compliance (GRC) activities.
● Assist in vulnerability management, security assessments, and remediation tracking.
● Review CVEs, threat intelligence, and security advisories.
● Support compliance initiatives related to DPDP Act, PCI DSS, ISO 27001, and PIMS (ISO 27701).
● Prepare security policies, standards, procedures, and documentation.
● Participate in security awareness and phishing simulation activities.
● Support vendor security assessments and privacy reviews.
● Research emerging cyber threats, AI security, and regulatory updates.

Required Skills & Knowledge
● Basic understanding of the DPDP Act, 2023 and Rules
● PCI DSS fundamentals
● PIMS (ISO 27701) and ISO 27001 fundamentals
● NIST Cybersecurity Framework (CSF)
● OWASP Top 10
● MITRE ATT&CK Framework
● CVSS and CVE concepts
● Network security fundamentals and protocols (TCP/IP, HTTP/HTTPS, DNS, SSH, TLS)
● Authentication and Authorization concepts
● Basic cloud security concepts (AWS/Azure/GCP)
● Basic understanding of Vulnerability Assessment & Penetration Testing (VAPT)

Preferred Qualifications
● Pursuing or recently completed a Bachelor's/Master's degree in Cybersecurity, Information Security, Computer Science, or related field.
● Knowledge of Burp Suite, Wireshark, Nmap, Nessus, or similar tools is an advantage.
● Relevant certifications such as Security+, CEH, or ISO 27001 are a plus.

● Strong analytical and problem-solving skills
● Curiosity and willingness to learn
● Good communication skills
● Attention to detail
● Ability to work collaboratively

What You'll Gain
● Hands-on exposure to enterprise cybersecurity and privacy programs
● Experience with industry-standard security and privacy frameworks
● Mentorship from experienced cybersecurity professionals
● Exposure to governance, compliance, security operations, and privacy initiatives

Responsible for safeguarding sensitive company data against unauthorized access, use, or disclosure, and for reporting any suspected security incidents in line with the organization's ISMS (Information Security Management System) policies and procedures.