Summer 2027 Cybersecurity Compliance Intern

Location: Mountain View, California Employment Type: Full-Time

To qualify for US internships, you must be currently enrolled in a degree-seeking program with an expected graduation date after the internship/co-op ends. If you do not meet this requirement, we invite you to explore other opportunities available on our careers website.

Intuit internships are 12 weeks throughout the summer. We have fixed start and end dates that are designed to work with various universities’ academic calendars.

Cohort 1: Monday, May 17 - Friday, August 6, 2027 (12 weeks)

Cohort 2: Monday, June 14 - Friday September 3, 2027 (12 weeks)

About our Emerging Talent Program

Intuit invests in Emerging Talent because fresh perspectives strengthen our products and teams. The program is backed by a culture that values curiosity and collaboration, and you'll be supported by dedicated managers and mentors who are invested in your growth. As an intern or co-op, you'll work on meaningful projects with business impact, many centered on AI and emerging technologies, and contribute to driving decisions. You'll build skills through function-specific learning opportunities, connect with a global community of interns and co-ops through dedicated programming and social events, and get exposure to senior leadership and cross-functional work across Intuit's product ecosystem. Learn more about our Intern and Co-op Program here .

Our cybersecurity internship roles provide a unique opportunity to gain hands-on experience in vital cybersecurity domains. This internship sits within Intuit's Cybersecurity Governance, Risk & Compliance (GRC) organization, reporting into the Security Compliance team under the CISO. Our team is responsible for industry and regulatory compliance across Intuit and its entities — including Credit Karma and Mailchimp — spanning frameworks and regulations such as ISO/IEC 27001, ISO/IEC 42001 (AI management systems), SOC 1/SOC 2, PCI DSS, HIPAA, NYDFS Part 500, DORA, NIS2, GDPR, and HIPAA. As a Cybersecurity Compliance Intern focused on GRC compliance and engineering, you'll have the opportunity to work at the intersection of compliance, security engineering and software engineering: helping us scale a unified Common Control Framework (CCF), AI-enabled automated evidence collection and AI-enabled control testing and assurance management.

Responsibilities

Contribute to the expansion of Intuit's Common Control Framework (CCF), helping crosswalk and map controls across frameworks such as ISO/IEC 27001:2022, ISO/IEC 42001:2023, SOC 2, PCI DSS v4.0.1, DORA, NIS2, and NYDFS Part 500.

Build GRC engineering solutions — scripts, integrations, and dashboards (e.g., Python, APIs, data visualization) — that automate compliance evidence collection, control monitoring, and audit readiness workflows.

Support AI compliance initiatives, including readiness work for ISO/IEC 42001 certification: AI system inventories, risk and impact assessment documentation, and control implementation tracking.

Assist with compliance integration work across Intuit entities (e.g., harmonizing Credit Karma controls, policies, and audit evidence with the enterprise compliance program).

Participate in audit support activities: preparing control narratives, gathering and validating evidence, and tracking remediation items across SOC 2, ISO, and PCI DSS audit cycles.

Analyze compliance data (control coverage, gaps, evidence sufficiency) and help create reporting for leadership, including metrics and dashboards that show compliance posture at a glance.

Qualifications

Must Haves

Current enrollment in a degree-seeking program (associate’s, bachelor's, master's, MBA, PhD, or the equivalent) with an expected graduation date after the internship ends

Familiarity with AI tools and a curiosity about how AI can be applied to solve real-world problems

Must be legally authorized to work in the United States on a full-time basis for the duration of the internship

Ability to work in a hybrid environment at an Intuit office location determined by your team and role (Relocation stipend will be provided)

Awareness of core cybersecurity concepts and common vulnerabilities.

Exposure to Artificial Intelligence (AI) programs, tools and concepts (e.g., Claude Code, Claude Cowork, Google Gemini)

Awareness, knowledge and/or experience with at least one of the following areas: security compliance frameworks (e.g., ISO 27001, SOC 2, PCI DSS, NIST); security governance concepts; risk analysis; IT audit.

Desire to learn and grow within a technical environment.

Excellent verbal and written communication skills.

Programming or scripting experience in at least one language (e.g., Python, SQL, JavaScript), with interest in applying it to automation, data analysis, or API integrations.

Knowledge and/or experience with at least one of the following areas: risk analysis; intelligence analysis; cyber forensics; security compliance frameworks; security governance concepts

Strong analytical skills — comfort working with structured data, spreadsheets, and mapping exercises that require attention to detail.

Nice to Haves

Familiarity with GRC platforms or compliance automation tooling (e.g., ServiceNow GRC, Vanta, Drata, Hyperproof, or similar).

Experience with cloud security (AWS, Azure, GCP), Git, or CI/CD pipelines.

Coursework or projects involving AI governance, responsible AI, or ML systems.

Awareness of emerging regulations affecting financial technology (e.g., DORA, NIS2, EU AI Act) or payments compliance (PCI DSS).

Participation in CTF competitions, personal security projects, or open-source contributions.

Location

Mountain View, California

Intuit provides a competitive compensation package with a strong pay for performance rewards approach. This position may be eligible for a cash bonus, equity rewards and benefits, in accordance with our applicable plans and programs (see more about our compensation and benefits at Intuit®: Careers | Benefits ). Pa