Compliance Internship - 6 Months

Who we are
Luxembourg National Data Service (LNDS) is a brand of PNED G.I.E. an organisation created by the Luxembourg Government, to implement Luxembourg’s strategies in research, innovation, and digitalisation. LNDS enables value creation from secondary use of data, for public and private partners and supports the sharing and re-use of public sector data, in a trustable manner. The LNDS service portfolio includes know-how, capabilities, tools, infrastructure, and data services. Through efficient & responsible use of data and improving the secondary use of data, LNDS will support the acceleration of economic, ecological, and societal transitions.
Purpose of the job / project
You will work closely with a multidisciplinary team to support the GRC (Governance, Risk and Compliance) Team.

What you will do

GRC, Privacy and IT security compliance:
Supporting the Compliance team into maintaining the GRC framework of the organization
Supporting the compliance team in privacy control ISO 27001 and 27701
Onboarding suppliers & project internal assessments (process improvement, PIAs, DPIAs…)
Legal reviews (DPAs, IT contracts…)
AI compliance
AI Compliance by Design:
Support project and development teams in integrating applicable AI compliance and GRC requirements throughout the solutions lifecycle
AI Governance & Control Framework:
Support the implementation of a coordinated AI framework (Asset inventory, controls, roles & responsibilities, monitoring…)
Who you are
Master’s degree in Law, GRC, Business Administration or related field
Certifications such as CIPP/E, CIPM, ISO 27001, ISO 27701, ISO 42001 or COSO certificates are a plus
Good sense of autonomy
Being able to liaise with technical developers on AI security related topics. A first pivotal experience (e.g. in-house) is a plus
Learning-by-doing mindset
Comfortable and eager to use new IT tools (Atlassian, Copilot, Sharepoint…)