ISO 27001 Implementation Internship

Build Your Future in Information Security Management Are you interested in how organisations build security that actually holds - not only tools and firewalls, but the policies, decisions and routines behind them? Do you want to help companies protect the information their business depends on, and earn the certification that proves it? If so, we have the perfect opportunity for you!

About the Internship Our ISO 27001 Implementation Internship is designed for ambitious individuals who want to explore the world of information security management and gain hands-on experience. This program offers the chance to work on real client implementations, learn the ISO/IEC 27001 standard from the inside, and collaborate with experienced consultants who take companies all the way to certification.

What You'll Learn As an intern, you will:

Work through a full ISO/IEC 27001 implementation, from initial gap analysis to certification audit.

Learn how information security risk assessments are run and turned into a practical risk treatment plan.

Help draft the policies, procedures and records that make up a working ISMS.

Support internal audits and management reviews, and see how findings are followed up and closed.

Gain hands-on experience with the Annex A controls and how they are applied in real organisations.

This internship is designed for individuals eager to understand how security is built into the way a business runs, rather than bolted on afterwards. Every risk you help assess and every control you help implement makes a real organisation more resilient and safer for the customers and colleagues who depend on it.

Why Join Us?

Hands-on experience with real ISO 27001 implementations, from first workshop to certification.

Guidance and mentorship from experienced ISMS consultants and lead implementers.

Exposure to a wide range of clients and industries across Sweden and the Nordics.

A collaborative and supportive environment where questions are always welcome.

Who We're Looking For We welcome interns who:

Have a strong interest in information security, risk management and governance.

Have a solid grasp of how IT environments and business processes fit together. You do not need to be an expert, but we expect you to be comfortable discussing both the technology and the way an organisation works.

Have some familiarity with ISO/IEC 27001 and ISO/IEC 27002, or related frameworks such as NIS2, CIS Controls or SOC 2, through studies or self-learning.

Understand the basics of risk assessment: assets, threats, likelihood and impact.

Write clearly and precisely in English. Swedish is a strong bonus, as much client work is in Swedish.

Are comfortable in Word and Excel, and organised enough to keep documentation and evidence in good order.

Have supported an audit, a quality management system or similar documentation work through studies, work or personal projects. This is a bonus, not a requirement.

Have strong analytical and problem-solving skills, and the confidence to ask the right questions and follow up on the answers.

Are ready to contribute ideas and collaborate with a dynamic team.

Approach client information with care, discretion and a strong ethical mindset.

How to Apply Send your resume and a cover letter explaining why you're excited about information security management and why you are an ideal candidate for the role. It is recommended to include any coursework, certifications or projects related to ISO standards, auditing or risk management that you have worked on. Please note: This is an unpaid, full-time, 6-month onsite internship starting in October at our offices in Lindholmen, Gothenburg. Applications are open until 31st of September. Don’t miss this chance to kickstart your career in information security! Join us, and let's build a safer digital world together!