Cybersecurity Compliance Intern

To qualify for US internships, you must be currently enrolled in a degree-seeking program with an expected graduation date after the internship or co-op ends. If you do not meet this requirement, you can explore other opportunities on our careers website.

Intuit internships run for 12 weeks over the summer, with fixed start and end dates designed to fit various universities' academic calendars.

• Cohort 1: Monday, May 17 to Friday, August 6, 2027 (12 weeks)
• Cohort 2: Monday, June 14 to Friday, September 3, 2027 (12 weeks)

About our Emerging Talent Program

Intuit invests in Emerging Talent because fresh perspectives strengthen our products and teams. Interns and co-ops are supported by dedicated managers and mentors who are invested in their growth, and they work on meaningful projects with business impact, many centered on AI and emerging technologies.

Participants build skills through function-specific learning, connect with a global community of interns and co-ops through programming and social events, and gain exposure to senior leadership and cross-functional work across Intuit's product ecosystem. More details are available on our Intern and Co-op Program page.

This cybersecurity internship offers hands-on experience in key cybersecurity domains. It sits within Intuit's Cybersecurity Governance, Risk & Compliance (GRC) organization and reports to the Security Compliance team under the CISO.

The team handles industry and regulatory compliance across Intuit and its entities, including Credit Karma and Mailchimp. Frameworks in scope include ISO/IEC 27001, ISO/IEC 42001 (AI management systems), SOC 1 and SOC 2, PCI DSS, HIPAA, NYDFS Part 500, DORA, NIS2 and GDPR. As a Cybersecurity Compliance Intern, you will work across compliance, security engineering and software engineering to help scale a unified Common Control Framework (CCF), AI-enabled automated evidence collection, and AI-enabled control testing and assurance management.

Responsibilities

• Help expand Intuit's Common Control Framework (CCF) by mapping controls across frameworks such as ISO/IEC 27001:2022, ISO/IEC 42001:2023, SOC 2, PCI DSS v4.0.1, DORA, NIS2 and NYDFS Part 500.
• Build GRC engineering solutions, such as scripts, integrations and dashboards, that automate compliance evidence collection, control monitoring and audit readiness.
• Support AI compliance initiatives, including readiness work for ISO/IEC 42001 certification: AI system inventories, risk and impact assessments, and control implementation tracking.
• Assist with compliance integration across Intuit entities, such as aligning Credit Karma controls, policies and audit evidence with the enterprise compliance program.
• Support audit activities by preparing control narratives, gathering and validating evidence, and tracking remediation items across SOC 2, ISO and PCI DSS audit cycles.
• Analyze compliance data (control coverage, gaps and evidence sufficiency) and help build reporting and dashboards that show compliance posture for leadership.

Intuit offers a competitive compensation package with a pay-for-performance approach. This position may be eligible for a cash bonus, equity rewards and benefits, depending on applicable plans. Pay is based on factors such as job-related knowledge, skills, experience and work location.