GRC Intern

Location: Gurugram (On-site)

Stipend: INR 30,000 per month

Duration: 3 Months

About Osto

Osto is a protection-first cybersecurity platform helping startups become enterprise-ready through security, compliance, and continuous protection across cloud, endpoints, applications, networks, and infrastructure.

We're building the cybersecurity platform we wish startups had from day one.

The Role

We're looking for a GRC (Governance, Risk & Compliance) Intern to join Osto's cybersecurity team and work on real-world security and compliance engagements.

This is a hands-on role for someone who wants to build a career in cybersecurity, risk, and compliance within a fast-growing startup. You'll gain practical exposure to security frameworks, cloud security, audit readiness, and customer compliance projects while working alongside experienced professionals.

What You'll Do

• Assist with compliance assessments across frameworks such as ISO 27001, SOC 2, HIPAA, and DPDPA
• Support security control mapping and gap assessment activities
• Participate in cloud security posture reviews across AWS, Azure, and GCP
• Help maintain risk registers and track remediation activities
• Assist in drafting and reviewing security policies and documentation
• Support audit evidence collection and compliance documentation
• Assist in responding to customer security questionnaires
• Research evolving cybersecurity regulations and compliance requirements
• Work closely with the team on live customer engagements and internal security initiatives

What We're Looking For

• Currently pursuing or recently completed a Bachelor's degree in Computer Science, Information Security, Cybersecurity, or a related field
• Basic understanding of cybersecurity concepts such as access control, encryption, networking, and cloud security
• Familiarity with at least one compliance framework such as ISO 27001, SOC 2, NIST CSF, or DPDPA is preferred
• Strong analytical, documentation, and communication skills
• High ownership, attention to detail, and willingness to learn
• Familiarity with cloud platforms (AWS, Azure, or GCP) is a plus

What You'll Gain

• Hands-on experience working on real cybersecurity and compliance projects
• Opportunity to work directly with Osto's founding team
• Exposure to leading frameworks like ISO 27001, SOC 2, HIPAA, and DPDPA
• Potential for a full-time opportunity based on performance