Information Security Governance Intern

Zoox’s internship program provides hands-on experiences with state of the art technology, mentorship from some of the industry's brightest minds, and the opportunity to play a part in our success. Internships at Zoox are reserved for those who demonstrate outstanding academic performance, activities outside their course work, aptitude, curiosity, and a passion for Zoox's mission.

In this Role, You will collaborate with the ISG team to support the following areas::
Governance Operations: Support day-to-day governance operations related to policies, standards, procedures, security requirements, and associated documentation. Data & Reporting: Assist in the collection and management of data from multiple systems to help report on Information Security program effectiveness through risk analysis and trends. Documentation: Help collect data, compose reports, and draft or improve information security policies, standards, technical implementation guidelines, and job aids. Core ISG Practices: Participate in one or more of ISG’s core practices, including Policies & Standards, Risk Management, Third Party-Risk Management, and Information Security Awareness & Training. Stakeholder Engagement: Work alongside business partners and stakeholders to gather relevant input for company documentation and learn how to securely enable the business.

Requirements:
Currently working towards a B.S., M.S., Ph.D., or advanced degree in an Information Security, Cybersecurity, Business Administration, Information Systems, or a related field program Good academic standing Able to commit to a 12-week internship beginning in May or June of 2026. At least one previous industry internship, co-op, or project completed in a relevant area Ability to relocate to the Bay Area, California for the duration of the internship Interns at Zoox may not use any proprietary information they are working on as part of their thesis, any published work with their university, or to be distributed to anyone outside of Zoox

Technical Qualifications :
Framework Knowledge: Basic understanding of, or a strong desire to learn, information security frameworks such as NIST 800-53, NIST-CSF, ISO 27001, and CIS controls. Risk & Privacy: Fundamental knowledge of risk management, security, and privacy practices. Communication: Strong written and verbal communication skills, with the ability to articulate complex concepts clearly. Technical Skills: Familiarity with standard office productivity tools; familiarity with the administration and operation of GRC tools is a plus. Compliance: Classroom or project exposure to SOC2 and Trust Service Criteria assessments is preferred but not required.

Bonus Qualifications:
An ideal candidate who is organized, detail-oriented, and eager to understand how to apply security governance in a real-world environment. A proactive learner willing to support internal stakeholders and provide consultations under the guidance of senior team members.

The monthly salary range for this position is $5,500 to $7,500. Compensation will vary based on geographic location and level of education. Additional benefits may include medical insurance, and a housing stipend (relocation assistance will be offered based on eligibility).