Governance, Risk, and Compliance Internship, Notion

• Pursuing a Bachelor's or Master’s degree in Computer Science, Information Technology, Management Information Systems, Cybersecurity, or another related field
• Previous internship experience
• Understanding of AI agents and AI-enabled coding tools
• Proficiency in Python, Rest API calls
• Experience independently executing tasks that require collaboration across multiple teams and time zones
• Ability to communicate nuanced ideas clearly when communicating with stakeholders
• A collaborative mindset—you enjoy working cross-functionally to accomplish shared goals and care about learning, growing, and helping others do the same
• This internship will take place from January – April 2026 and you will need to be able to work out of our SF office during this time
• If you’re excited about a role but your past experience doesn’t align perfectly with every bullet point listed in the job description, we still encourage you to apply
• If you’re a builder at heart, share our company values, and enthusiastic about making software toolmaking ubiquitous, we want to hear from you

Desirable

• This internship will take place from January – April 2026 and you will need to be able to work out of our SF office during this time
• Millions of people use Notion — and this number is increasing every day. Our users depend on us to deliver a secure, consistent and trustworthy experience, and we value this more than anything
• We want to keep building on that trust, while also continuing to amaze our users with the tools they can build in Notion
• This is where you come in — partnering with teams across the organization to envision, plan and build Notion's Information Security posture for governance, risk and compliance
• Helping mature, and scale our Security Compliance, Sales Enablement, Training and Governance program
• Driving compliance evidence automation via building custom connectors
• Supporting staff training around Security
• Scaling our on-call workflows to meet growing business demand using custom AI agents and automation
• Working cross-functionally to retain SOC2 Type II, ISO 27001, HIPAA, and other security certifications that exhibit assurance internally and externally