Sprinto is accepting applications for Information Security Compliance Intern in its GRC - Infosec Team. The official vacancy is marked Remote (India). Jobsii checked the live employer listing and application form on 19 October 2026. Candidates must have completed a graduation or master's degree in GRC, Information Security, Risk Management, Computer Science or a related field. This is not advertised as an internship for every currently enrolled student.
The work centers on governance, risk and compliance, audit partners and evidence mapping, with opportunities to build AI-assisted operational workflows. The employer does not disclose a stipend, explicitly confirm paid or unpaid status, or publish the internship duration. The application contains mandatory employment-history questions that may need clarification for candidates without previous employment. These restrictions matter more than the remote-work label alone.
Employer: Sprinto. Official title: Information Security Compliance Intern. Team: GRC - Infosec Team. Location and arrangement: remote in India. Application method: Sprinto's official Lever form. No application deadline, joining date, vacancy count or daily schedule is published. The posting was present on the employer's current job board and its application form was accessible when checked. Remote does not imply unrestricted eligibility outside India.
The Audit Experience function manages relationships with Sprinto's audit-partner ecosystem. The intern works alongside a subject-matter expert, learning how audit programmes operate, how controls are evaluated and how cybersecurity requirements become audit expectations. SOC 2 and ISO 27001 are specifically mentioned. This is a compliance and audit-operations opportunity, not an advertised penetration-testing, incident-response or security-research internship.
The intern helps partners move through onboarding and enablement, maintains internal trackers, coordinates dependencies and flags stalled progress. Directory work includes checking accreditation status against relevant accreditation bodies, keeping partner profiles current and ensuring factual accuracy. The role also supports verification of new partner candidates. Accuracy and follow-through are important because the information is used by other teams and audit partners.
Routine auditor and internal-team questions are handled at the first-response level, with unusual matters escalated to the subject-matter expert. Other support can include research, documentation, process improvements and cross-functional coordination. Applicants should expect operational work as well as learning about frameworks; the description does not present the internship as observation-only training or unrestricted authority to make audit decisions independently.
Evidence-mapping work helps connect audit evidence requirements with platform capabilities. Tasks include preparing reference information, identifying gaps and documenting findings for product improvements. The intern also helps build and refine AI agents for recurring work such as partner questions, directory reviews and evidence lookups. Claude, ChatGPT, Gemini or equivalent tools are named as examples of relevant GenAI platforms.
The description includes prompt design, testing agentic workflows and developing repeatable automation patterns. It does not require applicants to have built a production AI agent already: prior automation experience is a strong plus, while willingness to learn and experiment matters. Candidates should still be comfortable using GenAI tools and understand the need to review outputs rather than treating generated answers as verified evidence.
The qualification wording requires a completed graduation or master's degree in GRC, Information Security, Risk Management, Computer Science or a related field. Direct academic grounding in GRC or audit is strongly preferred. Prior audit exposure through academic projects, internships or professional work is a strong plus, and candidates with experience in or near audit functions are particularly encouraged to apply.
No minimum professional-experience duration, age limit, graduation batch, college tier or marks cutoff is stated in the role description. However, applicants should not interpret this as confirmation that the generic application form accommodates every first-job candidate. Strong written communication, attention to detail, spreadsheets, trackers, data handling and independent ownership of routine work are explicit expectations. The subject-matter expert provides guidance and review.
The official vacancy does not state a stipend or salary amount and does not explicitly describe the internship as paid or unpaid. Jobsii cannot borrow a pay figure from another Sprinto opening or a third-party estimate. Duration, working hours, equipment support and conversion to permanent employment are also not specified. Ask for these terms before accepting, and do not treat the internship title as a guarantee of payment or a later job.
Use the official application link below. At verification, resume/CV, full name, email and phone were required. The form also required a LinkedIn profile link, expected annual fixed compensation and a notice-period choice. Other professional portfolio links were offered separately. Follow the current required-field labels rather than assuming a resume upload is the complete application. Jobsii does not submit applications or arrange interviews for this vacancy.
Several mandatory questions refer to a previous organization, its industry and size, work capacity, time at the current employer, previous-role KPIs and an example of impact. These appear even though the description does not impose a minimum professional-experience duration. If the questions do not fit your background, seek clarification through Sprinto's official recruitment channel rather than inventing an employer, salary or experience history to complete them.
The current-compensation range question offers a prefer-not-to-answer choice. Optional current-salary text fields are separate from the required expected-pay field. A request for salary information is not disclosure of the employer's budget. The form also states that AI may assist recruitment tasks while final hiring decisions are made by people; review the employer's data-processing information before sharing personal documents.
Prepare a short, anonymized example of careful verification: what information you checked, which source you used, how you recorded discrepancies and when you escalated uncertainty. For an academic project, clearly identify it as academic work. A simple evidence-to-requirement mapping or clean spreadsheet can show precision without pretending to be a professional auditor. These are editorial suggestions, not a promised interview assignment.
If demonstrating an AI workflow, use synthetic or public information and explain its limitations, checking steps and escalation boundaries. Do not upload confidential audit evidence, employer documents or personal customer data to public tools for a portfolio. Before accepting, clarify supervision, schedule, duration, compensation and how performance is assessed.
Verified on 19 October 2026. No closing date is published. Check the current listing and application requirements again before applying.
Review the role details, deadline, and work mode before applying. Jobsii tracks the apply action so candidates can keep application history inside their dashboard.
