Cybersecurity Intern: Governance, Risk, and Compliance (GRC) Analyst

Location: Detroit, MI US

Inside the Role

Interns will gain knowledge and experience through exciting and real-life learning opportunities. Interns must work in accordance with DTNA’s core values of passion, respect, integrity and discipline. Internship positions can be located at various DTNA locations across the US. We are looking for high performing and motivated individuals in various areas within DTNA organizations. DTNA internships begin each summer in May or June.

As a Cybersecurity Governance, Risk, and Compliance (GRC) Intern, you will contribute to key risk management initiatives including information classification, policy and standards compliance, and the development and tracking of cybersecurity Key Performance Indicators (KPIs) and Key Risk Indicators (KRIs). The role offers hands-on experience with both corporate Information Technology (IT) and plant floor Operational Technology (OT) environments, providing visibility into how cybersecurity frameworks and controls are applied across a hybrid enterprise. You will work alongside experienced practitioners to support risk management activities aligned to industry standards such as the National Institute of Standards and Technology (NIST) Cybersecurity Framework (CSF), National Institute of Standards and Technology Special Publication (NIST SP) 800-53, and the International Organization for Standardization (ISO) 27000 series.

Interns in this role may have the opportunity to transition into a full-time position subject to manager evaluations and business availability.

Posting Information

We provide a scheduled posting end date to assist our candidates with their application planning. While this date reflects our latest plans, it is subject to change, and postings may be extended or removed earlier than expected.

We Take Care of Our Team

Salary placement is determined by your anticipated graduation year and ranges between $21 - $29 per hour.

Benefits include

Professional development and networking events, including resume reviews/mock interviews

Housing and transportation stipend

Employee resource groups

Event ticket offering (based on corporate availability)

Company social events

What You Drive at DTNA

Contribute to risk management activities across IT and OT environments

Participate in identifying, documenting, and tracking cybersecurity risks, including those related to plant floor (operational technology) systems; support risk assessments, business impact analysis inputs, and mitigation tracking.

Develop and maintain cybersecurity metrics (KPIs and KRIs)Assist in defining, tracking, and reporting Key Performance Indicators (KPIs) and Key Risk Indicators (KRIs) to measure cybersecurity effectiveness, compliance posture, and risk trends across the organization.

Support information classification and data governance initiatives

Help classify data and systems based on sensitivity and criticality, ensuring appropriate handling, protection requirements, and alignment with enterprise data protection standards.

Assist with audit, assessment, and documentation efforts

Prepare and maintain documentation to support internal and external audits, cybersecurity assessments, and control validation activities, ensuring traceability and audit readiness.

Lead and support efforts to foster an inclusive and welcoming workplace culture where everyone belongs

Knowledge You Should Bring

Must be currently enrolled in a Bachelor’s program or higher from an accredited college/university OR have recently graduated within 1 year of the position start date (May/June)

Degree focus in Cybersecurity; Information Systems / Management Information Systems (MIS); Information Technology; Network Management and Security; Computer Science; or related business/technology degree programs with relevant cybersecurity Governance, Risk, and Compliance (GRC) coursework preferred

Proficiency with generative AI tools, including the ability to use AI effectively for research, analysis, automation, and problem solving while validating outputs for accuracy.

Familiarity with AI agents and agentic workflows, including how agents can be used to automate multi-step tasks and improve cybersecurity and GRC processes.

Comfort working cross-functionally and collaborating with both technical and non-technical colleagues and business partners.

Strong written and verbal communication skills, with the ability to explain cybersecurity and GRC topics clearly to audiences with different levels of technical knowledge.

Ability to balance hands-on technical work with meetings, stakeholder discussions, documentation, and follow-up activities.

Knowledge of information security concepts such as confidentiality, integrity, availability, access control, and risk management.

Coursework in cybersecurity, information systems, or risk management

Exposure to identity and access management (IAM) concepts

Awareness of frameworks (e.g., NIST, NIS2, TISAX, ISO 27001)

Interest in manufacturing / industrial cybersecurity (OT security)

Strong oral and written communication skills

Solid organizational skills

Creative mindset

Interpersonal skills and ability to work in a team environment

#LI-Hybrid

Where We Work

This position is open to applicants who can work in (or relocate to) the following location(s)- Detroit, MI US. Relocation assistance for this position is available when the selected candidate meets eligibility criteria.

Schedule Type

Hybrid (4 days per week in-office / 1 day remote). This schedule builds our #OneTeamBestTeam culture, provides an unparalleled customer experience, and creates innovative solutions through in-person collaboration.

At Daimler Truck North America, we recognize our world is changing faster than ever before. By listening to the needs of today, we’re building solutions with cutting-edge advancements in sustainability and future driving technologies - across electric, hydrogen, and autonomous innovation. Backed by decades of proven suc