ETIC, Cyber GRC Graduate Program

Line of Service

Advisory

Industry/Sector

Technology

Specialism

Advisory - Other

Management Level

Intern/Trainee

Job Description & Summary

Our Cyber Risk & Strategy​

team helps organizations​

understand and manage cyber risks, build governance models, and comply with regulations and leading practices.​

​

We work with clients to answer practical questions such as: Are our most important systems sufficiently protected? Are the right controls in place? Where are the biggest risks, and what needs to improve? Are we meeting regulatory and industry expectations?​

​

As part of the team, you will work at the intersection of business, technology and risk. You do not need to start as a Cybersecurity or GRC specialist. We will help you build the relevant cyber, risk and regulatory knowledge while you develop your consulting skills through client work.​

Core Activities: " What You'll Be Working On":

• Understand how clients manage technology risks: Speak with client teams, review processes, policies and system documentation, and identify where risks or control weaknesses may exist. ​

• Assess whether controls work as intended: Support audits and assessments by reviewing evidence, testing selected controls and documenting whether they are properly designed and operating effectively. ​

• Analyze risk and impact: Help assess what could go wrong, how significant the impact could be and whether existing measures are sufficient to manage the risk. ​

• Translate requirements into practical expectations: Learn how regulations, frameworks and standards such as ISO 27001 or NIST apply to real client environments and what organizations need to demonstrate in practice. ​

• Turn findings into actions: Structure observations, explain why they matter and help develop actions clients can take to strengthen their control environment. ​

• Support client delivery end to end: Prepare working papers, reports and presentations, track progress and actions, and coordinate with colleagues and client stakeholders to keep engagements moving.​

Key Skills:

0–4 years of professional experience. Prior cybersecurity experience is helpful but not required. ​

We are looking for people who are curious about how businesses and technology work and who enjoy breaking complex problems into structured solutions. You could come from cybersecurity, technology, audit, risk, business, finance, engineering or another analytical background.​

You should be comfortable analyzing information, working carefully with documentation and communicating your findings clearly. Strong English is important; German or Dutch skills are particularly valuable for some of our teams.​

An initial understanding of cybersecurity, risk management, controls or auditing is beneficial, but we expect much of the specialist knowledge to develop on the job. Relevant certifications can be an advantage, but I would not position them as a core requirement for a Young Professional role .​

Knowledge Exposure: " What You'll Build Expertise In":

During your first projects, you will learn how organizations identify and manage cyber risks, how regulations and security standards are applied in practice, and how consultants assess controls and turn findings into recommendations for management. Over time, you can deepen your expertise in areas such as cyber risk, governance, regulatory compliance, third-party risk or technology assurance.​

Education (if blank, degree and/or field of study not specified)

Degrees/Field of Study required:

Degrees/Field of Study preferred:

Certifications (if blank, certifications not specified)

Required Skills

Optional Skills

Desired Languages (If blank, desired languages not specified)

Travel Requirements

Not Specified

Available for Work Visa Sponsorship?

No

Government Clearance Required?

No

Job Posting End Date

October 6, 2027