Information Security Internship – Barcelona

About the role

Join papernest’s Infrastructure & Security team as an Information Security Intern in Barcelona. You will work closely with a Senior SecOps Engineer and the Head of Infrastructure to turn security activities into a structured, audit‑ready program, focusing on governance, risk, and compliance.

Key responsibilities

• Maintain and centralise the Security Policy Framework, ensuring accessibility for all employees.
• Assist with NIS2 compliance by mapping current measures to regulatory obligations.
• Support PCI‑DSS oversight by gathering evidence and organising documentation for auditors.
• Manage continuous compliance platforms such as Vanta to keep the company audit‑ready.
• Document security KPIs and prepare regular reports for leadership.
• Conduct vendor and third‑party risk assessments, send security questionnaires, and track contractual security clauses.
• Track vulnerability remediation tickets and follow up with developers.
• Organise security awareness initiatives, including phishing simulations and training sessions.

Required profile

• Student pursuing a degree in Business (IT Management), Computer Science, or Cybersecurity with a focus on GRC.
• Detail‑oriented with a strong preference for checklists and clear documentation.
• Excellent written English skills, capable of translating complex rules into simple language.
• Curiosity about regulations such as GDPR, NIS2, and PCI‑DSS.

Required skills

• Experience with Vanta or similar compliance platforms.
• Knowledge of PCI‑DSS and NIS2 compliance frameworks.
• Familiarity with vendor risk management processes.

What we offer

• Hands‑on experience in a fast‑growing European scale‑up.
• Mentorship from senior security professionals.
• Opportunity to contribute to real‑world security governance and compliance initiatives.