Intern – GRC Consultant | SafeEye (Pvt) Ltd

About SafeEye

SafeEye (Pvt) Ltd provides cybersecurity services to local and global clients in the private and public sectors. Its work covers consulting and advisory, governance, risk and compliance (GRC), incident response, penetration testing, security engineering, cloud and identity security, a 24/7 managed security operations centre (SOC), and cybersecurity training.

About the role

The Intern GRC Consultant joins the governance, risk and compliance practice. The intern works with senior consultants on client projects: helping organisations decide how much cyber risk they will accept, design governance models, and keep risk registers and compliance documents in order. It is a good entry point for someone who wants a cybersecurity career on the advisory side rather than the purely technical side.

Responsibilities

• Support client leadership teams in defining their risk appetite and a target state for their cybersecurity capabilities
• Help design operating and governance models so clients can run sustainable security practices
• Work with senior team members on projects and respond to client needs
• Assist with project life-cycle management, including risk assessments and compliance evaluations at each phase
• Help conduct and maintain internal risk assessments, risk registers and supporting documentation for standards and regulatory compliance

Requirements

• Basic understanding of cybersecurity principles, standards, risk frameworks and regulations
• Familiarity with SOC 2 and PDPA (Personal Data Protection Act) requirements is an advantage
• Well organised and responsible, with an aptitude for problem solving
• Excellent verbal and written communication skills
• A dedicated team player

Tips for your application

The role is document-heavy, so mention any risk register, policy or audit checklist you’ve drafted, even in coursework. If you’ve studied ISO 27001, NIST CSF, SOC 2 or Sri Lanka’s PDPA, list them by name.

How to apply

Email your CV to hr@safeeye.com.au. By applying, you agree that SafeEye may keep your CV for up to one year for future openings, after which it is deleted. The ad doesn’t state a work location or closing date, so apply soon.