SUMMARY The Cybersecurity Governance, Risk Management & Compliance (GRC) Intern will contribute to strengthening the security posture of a growing alternative investments firm. This opportunity is ideal for a curious, analytical, and collaborative individual who enjoys solving problems, simplifying complex information, and learning how cybersecurity enables business success.

Working alongside the Cybersecurity & Risk team, you'll gain hands-on experience supporting governance initiatives, risk assessments, compliance activities, and security improvement projects. You'll help translate technical requirements into practical guidance, research emerging risks and regulations, and collaborate with technology and business teams to support meaningful risk reduction.

This 10-week summer internship is based in our Chicago office and follows a hybrid schedule, with in-office attendance required Tuesday through Thursday.

RESPONSIBILITIES The Cybersecurity Intern will support the Cybersecurity & Risk team through the following activities:

• Apply strong writing and analytical skills to review, update, and simplify cybersecurity policies, standards, procedures, and controls aligned with frameworks such as NIST CSF and CIS Controls.
• Develop practical risk management skills by supporting security assessments, vendor reviews, client due diligence, audit evidence collection, and remediation tracking.
• Leverage curiosity, creativity, and problem-solving skills to identify and implement AI-driven solutions that automate manual GRC oversight activities, streamline workflows, and improve operational efficiency.
• Research emerging cybersecurity risks, regulatory requirements, and industry best practices. Strengthen critical thinking and communication skills by translating complex information into actionable insights and recommendations.
• Partner with technical and business teams to understand challenges, clarify requirements, and deliver meaningful process improvements while developing project management, communication, and stakeholder engagement skills.

EDUCATION, SKILLS AND EXPERIENCE REQUIREMENTS The ideal experience and critical competencies for the role include the following:

• Pursuing a bachelor’s degree in Computer Science, Information Technology, or related field (grad date: Dec 2027 – Spring 2028)
• Minimum GPA: 3.5
• Proficient in the use of Microsoft Excel, Word, and Visio
• Demonstrated team player, self-starter, and independent thinker
• Highly attentive to detail and accuracy at all levels
• Ability to adapt within a rapidly changing environment
• Ability to gather and analyze facts, draw conclusions, define problems, and suggest solutions
• Must be capable of working well independently as well as in a collaborative environment
• Must be able to communicate effectively
• Interest in cybersecurity and learning CIS Framework
• Interest in financial services and/or investment management a plus
• Security certifications are a plus

At a Glance - GCM’s Cybersecurity & Risk Team • Oversees the firm’s Cybersecurity, Risk Management, Change Management, Business Continuity, and Disaster Recovery programs • Collaborates with technology teams and other departments to ensure security best practices are a consistent theme • Utilizes Agile principles to prioritize and coordinate cybersecurity and risk initiatives • A strong team culture inside and outside the office • Adaptive to change and feedback from team members and firm employees

CULTURE We are not afraid to think differently. Embrace new ideas. Dream big. Welcome change. We are a culture of empowerment, accountability, high performance, and trust. Successful team members are self-motivated and energized by working alongside thoughtful and smart colleagues in a fast-paced environment. Individuals who thrive on this team enjoy being a part of an organization focused on excellence. We look for naturally collaborative individuals who enjoy interacting at all levels of the organization.

Intern positions are classified as short-term roles and therefore are not eligible for company-sponsored benefits, including health insurance, paid time off, or the 401(k) plan.

This position is not eligible for employer visa sponsorship now or in the future (including, but not limited to, H-1B, TN, or other employment-based visas). Applicants must be currently authorized to work in the United States without the need for employer sponsorship now or in the future. Applicants requiring future sponsorship for continued work authorization (for example, following F-1 OPT/CPT, or J-1 status) are not eligible.