AI Governance Associate (2027 Summer Internship)

risk3sixty is a bootstrapped, U.S.-based security and compliance firm. This build-focused internship sits inside a growing AI governance practice, where ISO 42001 implementation is a core advisory offering. The intern will help build new offerings (NIST AI RMF assessments, EU AI Act readiness, and agentic AI governance frameworks such as AIUC-1), build out the ethOS consulting team template library, and sit on live client engagements. The internship develops skills in translating normative standards into deliverable services, working inside live consulting engagements, and building fluency across AI governance frameworks.

Responsibilities

Research AI governance frameworks (NIST AI RMF, EU AI Act, AIUC-1) and map their requirements against existing risk3sixty methodology to find the gaps; Build initial templates and scoping tools to take each new offering to a client; Expand the ethOS consulting team template library across AI governance policies, risk management documentation, assessment toolkits, and scoping guides; Add customization guidance to documentation templates based on AI system lifecycle role (Provider, Developer, User), scope, and applicable framework; Support live AI governance consulting engagements and feed real client experience back into the materials

Requirements

Strong research skills and comfort reading dense technical standards, with the ability to pull out what matters and turn it into something practitioners can use; Clear, organized writing, clean enough to go to clients with minimal editing; Basic familiarity with core AI/ML concepts (how models are built, deployed, and monitored) enough to follow technical conversations; Basic familiarity with AI risk and governance concepts, including the AI system lifecycle; Some exposure to GRC, compliance, risk management, or consulting, through coursework, prior work, or genuine self-directed interest; Comfort in Microsoft 365 (Word, Excel, SharePoint); Detail-oriented and self-directed; Prolonged periods sitting at a desk and working on a computer; Must be able to lift up to 10 pounds at times

Nice to have

Prior exposure to ISO standards (ISO 27001, ISO 42001, ISO 27701, ISO 9001, or similar); Familiarity with the EU AI Act or NIST AI RMF; Exposure to AI ethics or governance coursework; Interest in cybersecurity policy