Job description

To qualify for US internships, you must be currently enrolled in a degree-seeking program with an expected graduation date after the internship/co-op ends. If you do not meet this requirement, we invite you to explore other opportunities available on our careers website. Intuit internships are 12 weeks throughout the summer. We have fixed start and end dates that are designed to work with various universities’ academic calendars. • Cohort 1: Monday, May 17 - Friday, August 6, 2027 (12 weeks) • Cohort 2: Monday, June 14 - Friday September 3, 2027 (12 weeks) About our Emerging Talent Program: Intuit invests in Emerging Talent because fresh perspectives strengthen our products and teams. The program is backed by a culture that values curiosity and collaboration, and you'll be supported by dedicated managers and mentors who are invested in your growth. As an intern or co-op, you'll work on meaningful projects with business impact, many centered on AI and emerging technologies, and contribute to driving decisions. You'll build skills through function-specific learning opportunities, connect with a global community of interns and co-ops through dedicated programming and social events, and get exposure to senior leadership and cross-functional work across Intuit's product ecosystem. Learn more about our Intern and Co-op Program here . Our cybersecurity internship roles provide a unique opportunity to gain hands-on experience in vital cybersecurity domains. This internship sits within Intuit's Cybersecurity Governance, Risk & Compliance (GRC) organization, reporting into the Security Compliance team under the CISO. Our team is responsible for industry and regulatory compliance across Intuit and its entities — including Credit Karma and Mailchimp — spanning frameworks and regulations such as ISO/IEC 27001, ISO/IEC 42001 (AI management systems), SOC 1/SOC 2, PCI DSS, HIPAA, NYDFS Part 500, DORA, NIS2, GDPR, and HIPAA. As a Cybersecurity Compliance Intern focused on GRC compliance and engineering, you'll have the opportunity to work at the intersection of compliance, security engineering and software engineering: helping us scale a unified Common Control Framework (CCF), AI-enabled automated evidence collection and AI-enabled control testing and assurance management. Responsibilities • Contribute to the expansion of Intuit's Common Control Framework (CCF), helping crosswalk and map controls across frameworks such as ISO/IEC 27001:2022, ISO/IEC 42001:2023, SOC 2, PCI DSS v4.0.1, DORA, NIS2, and NYDFS Part 500. • Build GRC engineering solutions — scripts, integrations, and dashboards (e.g., Python, APIs, data visualization) — that automate compliance evidence collection, control monitoring, and audit readiness workflows. • Support AI compliance initiatives, including readiness work for ISO/IEC 42001 certification: AI system inventories, risk and impact assessment documentation, and control implementation tracking. • Assist with compliance integration work across Intuit entities (e.g., harmonizing Credit Karma controls, policies, and audit evidence with the enterprise compliance program). • Participate in audit support activities: preparing control narratives, gathering and validating evidence, and tracking remediation items across SOC 2, ISO, and PCI DSS audit cycles. • Analyze compliance data (control coverage, gaps, evidence sufficiency) and help create reporting for leadership, including metrics and dashboards that show compliance posture at a glance. Qualifications Must Haves: • Current enrollment in a degree-seeking program (associate’s, bachelor's, master's, MBA, PhD, or the equivalent) with an expected graduation date after the internship ends • Familiarity with AI tools and a curiosity about how AI can be applied to solve real-world problems • Must be legally authorized to work in the United States on a full-time basis for the duration of the internship • Ability to work in a hybrid environment at an Intuit office location determined by your team and role (Relocation stipend will be provided) • Awareness of core cybersecurity concepts and common vulnerabilities. • Exposure to Artificial Intelligence (AI) programs, tools and concepts (e.g., Claude Code, Claude Cowork, Google Gemini) • Awareness, knowledge and/or experience with at least one of the following areas: security compliance frameworks (e.g., ISO 27001, SOC 2, PCI DSS, NIST); security governance concepts; risk analysis; IT audit. • Desire to learn and grow within a technical environment. • Excellent verbal and written communication skills. • Programming or scripting experience in at least one language (e.g., Python, SQL, JavaScript), with interest in applying it to automation, data analysis, or API integrations. • Knowledge and/or experience with at least one of the following areas: risk analysis; intelligence analysis; cyber forensics; security compliance frameworks; security governance concepts • Strong analytical skills — comfort working with structured data, spreadsheets, and mapping exercises that require attention to detail. Nice to Haves • Familiarity with GRC platforms or compliance automation tooling (e.g., ServiceNow GRC, Vanta, Drata, Hyperproof, or similar). • Experience with cloud security (AWS, Azure, GCP), Git, or CI/CD pipelines. • Coursework or projects involving AI governance, responsible AI, or ML systems. • Awareness of emerging regulations affecting financial technology (e.g., DORA, NIS2, EU AI Act) or payments compliance (PCI DSS). • Participation in CTF competitions, personal security projects, or open-source contributions. Location: • Mountain View, California Intuit provides a competitive compensation package with a strong pay for performance rewards approach. This position may be eligible for a cash bonus, equity rewards and benefits, in accordance with our applicable plans and programs (see more about our compensation and benefits at Intuit®: Careers | Benefits ). Pay offered is based on factors such as job-related knowledge, skills, experience, and work location. To drive ongoing fair pay for employees, Intuit conducts regular comparisons across categories of ethnicity and gender. The expected base pay range for this position is: Mountain View $45.5 - $82

Requirements

Must-haves

Intuit internships are 12 weeks throughout the summer. We have fixed start and end dates that are designed to work with various universities’ academic calendars.
Cohort 1: Monday, May 17 - Friday, August 6, 2027 (12 weeks)
Cohort 2: Monday, June 14 - Friday September 3, 2027 (12 weeks)
Build GRC engineering solutions — scripts, integrations, and dashboards (e.g., Python, APIs, data visualization) — that automate compliance evidence collection, control monitoring, and audit readiness workflows.
Support AI compliance initiatives, including readiness work for ISO/IEC 42001 certification: AI system inventories, risk and impact assessment documentation, and control implementation tracking.
Assist with compliance integration work across Intuit entities (e.g., harmonizing Credit Karma controls, policies, and audit evidence with the enterprise compliance program).
Participate in audit support activities: preparing control narratives, gathering and validating evidence, and tracking remediation items across SOC 2, ISO, and PCI DSS audit cycles.
Analyze compliance data (control coverage, gaps, evidence sufficiency) and help create reporting for leadership, including metrics and dashboards that show compliance posture at a glance.
Current enrollment in a degree-seeking program (associate’s, bachelor's, master's, MBA, PhD, or the equivalent) with an expected graduation date after the internship ends
Familiarity with AI tools and a curiosity about how AI can be applied to solve real-world problems
Must be legally authorized to work in the United States on a full-time basis for the duration of the internship
Ability to work in a hybrid environment at an Intuit office location determined by your team and role (Relocation stipend will be provided)
Awareness of core cybersecurity concepts and common vulnerabilities.
Exposure to Artificial Intelligence (AI) programs, tools and concepts (e.g., Claude Code, Claude Cowork, Google Gemini)
Awareness, knowledge and/or experience with at least one of the following areas: security compliance frameworks (e.g., ISO 27001, SOC 2, PCI DSS, NIST); security governance concepts; risk analysis; IT audit.
Desire to learn and grow within a technical environment.
Excellent verbal and written communication skills.
Programming or scripting experience in at least one language (e.g., Python, SQL, JavaScript), with interest in applying it to automation, data analysis, or API integrations.
Knowledge and/or experience with at least one of the following areas: risk analysis; intelligence analysis; cyber forensics; security compliance frameworks; security governance concepts

Nice-to-haves

Familiarity with GRC platforms or compliance automation tooling (e.g., ServiceNow GRC, Vanta, Drata, Hyperproof, or similar).
Experience with cloud security (AWS, Azure, GCP), Git, or CI/CD pipelines.
Coursework or projects involving AI governance, responsible AI, or ML systems.
Awareness of emerging regulations affecting financial technology (e.g., DORA, NIS2, EU AI Act) or payments compliance (PCI DSS).
Participation in CTF competitions, personal security projects, or open-source contributions.

Application prep

Use the role’s language and application details while tailoring your materials.

Keywords to mirror

aipythonsqljavascriptapiawsazuregcpci/cdml

Platform: career-feeds
Effort: medium