Intern - Information Security & Access Governance (Digital Authorization Concept) (f/m/d)

Location: Frankfurt am Main, DE

Your area of work

The Transformation Office provides robust project management and information security capabilities to the CTO organization. Within Transformation office, the Information Security, Risk & Regulatory unit drives continuous improvement of the CTO’s security posture through measurable outcomes.

As an intern (f/m/d) you will support the migration CTO teams to modernize its access control governance by transitioning from static, document-based authorization concepts to a dynamic Digital Authorization Concept (DAC).

The main objective of this internship is to master the DAC framework, understand its functional and security requirements, and serve as a central guide and facilitator for Application Owners, Technical Reviewers, and Business Owners across the organization to ensure their applications are accurately modeled and compliant.

Your responsibilities

You act as the first point of contact for Application Owners, Technical Reviewers, and Business Role Owners implementing or updating their DAC

You guide stakeholders through the end-to-end DAC lifecycle, from initial asset description to final approval

You host walkthroughs and support sessions to explain attribute requirements, role definitions, and workflow steps

You review submitted DACs for accuracy and completeness, ensuring required fields are properly documented (e.g., entitlement descriptions, business criticality, tier levels, access types, and environment tags)

You track and monitor DAC approval lifecycles across all mandatory approval gates (Business Role Owner, Technical Reviewer, and Legal Entity reviewers)

You collect user feedback to propose usability and process improvements to the IAM Core Team

Your profile

You are enrolled in or recently graduated from a relevant field such as Computer Science, Information Security, Business Informatics, Information Systems, or a related discipline

You have basic understanding of Information Security and Identity & Access Management (IAM) concepts (Role-Based Access Control / RBAC, entitlements, principle of least privilege, Segregation of Duties / SoD)

You have strong analytical skills with high attention to detail and structured thinking

You are customer-oriented, collaborative attitude with patience in explaining technical/governance requirements to non-security stakeholders

You are able to work independently in an international, multicultural corporate environment

You are fluent in written and spoken English (corporate language); German or French is an asset

Prior exposure to tools like SailPoint IIQ, NEXIS, Jira, or Confluence is an advantage, but not required

Start date: 01/12/2026