Risk & Governance Intern

About the role

The Risk & Governance Intern sits within Roche's Product Security and Privacy Organization (PSPO), which protects Roche Diagnostics products, customers and patients from cybersecurity and privacy risks. The intern bridges regulatory operations, information security and digital innovation, supporting compliance and quality control while helping to automate processes with AI tools and low-code/no-code solutions.

Key responsibilities

• Research and monitor new industry regulations, laws and standards, and use AI tools to summarise regulatory updates and assess their impact on company policies.
• Support internal compliance reviews, risk assessments and quality control checks, and help gather audit evidence and review documentation.
• Analyse compliance workflows to find manual bottlenecks and propose and help build low-code/no-code automation solutions.
• Help draft, review and update Global Standard Procedures (GSPs) and compliance manuals, and build automated tracking systems for policy renewals and employee acknowledgments.
• Prepare clear materials for leadership meetings, such as Management Reviews for the ISMS.

Required profile

• Recent graduate in Information Systems, Computer Science, Engineering or a related field.
• Familiarity with information security concepts (risk assessment, confidentiality, integrity, availability) and regulatory mandates such as GDPR.
• Genuine curiosity about AI tools and how they can solve real business problems.
• Strong written and verbal communication, well organised, proactive and comfortable working with limited supervision.
• Fluency in English.