Enterprise Security, Risk and Compliance Co-Op/Internship

Responsibilities

• Assist with maintaining security, privacy, and compliance documentation, reviews, updates, and publication processes.
• Support ongoing compliance initiatives related to SOC 2, ISO 27001, GDPR, NIS2, and other applicable frameworks.
• Support enterprise risk management activities, including risk identification, assessment, documentation, reporting, and tracking.
• Aid in maintaining the risk register and tracking risk treatment plans.
• Assist in conducting vendor security assessments.
• Support security incident response activities through documentation, tracking, and coordination efforts.
• Maintain records within Governance, Risk, and Compliance (GRC) platforms.
• Collect, format, and present security risks and vulnerabilities to support the remediation plan and activities.
• Support third-party risk management activities, including vendor risk assessments, security questionnaire reviews, and vendor documentation upkeep.

Qualifications

• Ability to work a hybrid role (Mon-Fri, 9 am-5pm) for a fall Co-Op internship period (July/August - January 2026)
• Undergraduate or graduate student currently enrolled at an accredited college or university studying the field of business administration, computer science, legal studies, security, audit and/or engineering.
• An intermediate or higher level understanding of technology.
• Proficient in the use of MS Office applications. Proficient English communication skills, both written and verbal, with the ability to engage diverse audiences effectively.
• Affinity for working with people in a team environment and professional demeanor.
• Minimum cumulative grade point average of 3.0
• Previous Internship experience in the field of information security or Governance, Risk, and Compliance (GRC) is a plus.

Additional Information

Locus Robotics is an equal opportunity employer.

Application Fraud Detection Notice: To help maintain a fair and secure hiring process, Locus Robotics may use AI-assisted and other automated tools to detect suspected fraud, misrepresentation, or misuse of the application process. Hiring decisions are not made solely by automated means unless otherwise disclosed where required by law.

It is unlawful in Massachusetts to require or administer a lie detector test as a condition of employment or continued employment. An employer who violates this law shall be subject to criminal penalties and civil liability.