Grc Internship Jobs (NOW HIRING)

Momentum is a respected collection of independent companies, including PMG, Koddi, Further. We serve as a premier global business transformation partner for over 125 of the Fortune 500 brands. With 1,400 global employees and $5B in media spend under management, we foster a fast-growing, values-driven, people-first environment where you can thrive.
Our portfolio of companies partners with some of the world's most iconic and ambitious brands. We combine scalability with a solutions-oriented approach to deliver fast-paced, innovative results for our customers while creating meaningful growth opportunities for our teams.
If you are looking for opportunities to grow in your career and are passionate about being at the forefront of data and technology, and driving rapid innovation in the future of commerce, we would love to talk with you about joining Momentum.
We believe that a culture of belonging, inclusion, and diversity is key to empowering our team members to thrive both personally and professionally. Living out our values is not just a goal; it's a daily practice! For more information, please visit www.momentum.com.
The Opportunity
This is an entry-level security role for a recent graduate ready to learn by doing. You will support day-to-day security operations across a holding company and portfolio of businesses, working directly alongside the Cybersecurity Operations Engineer and GRC & Risk Analyst on monitoring, vulnerability tracking, audit activities, and compliance support.
The work is real from week one - defined runbooks, close mentorship, and clear escalation paths. The goal is a well-rounded practitioner who can specialize in either security operations or GRC within 12-18 months. We operate at 100% internal AI adoption. Using AI tools daily is expected from day one.
Join us in this full-time role, based in our Dallas Office at the Link: 2601 Olive Street, Dallas, TX. Be part of a vibrant community where amazing people, data & insights, and perpetual innovation converge to shape the future of digital commerce!
About This Role at Momentum
As an Associate Cybersecurity Analyst on our Cybersecurity team at Momentum, your days will be dynamic and filled with opportunities to contribute to our mission. Here's a glimpse into what your overall responsibilities might look like:

• Security Monitoring & Alert Triage
  • Review alerts in MDR/SOC tooling. Identify false positives and escalate suspicious activity to the Cybersecurity Operations Engineer per defined runbooks.
  • Monitor security dashboards during assigned windows. Document findings clearly for handoff and maintain accurate alert disposition records.
  • Support the development and refinement of triage runbooks as you build environment familiarity.
• Vulnerability Management
  • Run scheduled vulnerability scans across defined asset groups. Validate and categorize findings under guidance.
  • Track remediation progress and update the vulnerability register. Flag overdue patch management SLAs for escalation and help generate leadership reports.
• Incident Response Support
  • During active incidents, gather requested evidence, document timelines, and support investigation tasks under direct guidance.
  • Maintain IR documentation: logs, timelines, and post-incident notes. Participate in tabletop exercises as observer and note-taker.
• GRC & Compliance Support
  • Collect and organize audit evidence for SOC 2 and ITGC activities. Complete control checklists accurately and on schedule under GRC Analyst direction.
  • Support client security questionnaire responses by gathering documentation and evidence from internal systems.
  • Assist with policy attestation tracking, vendor risk register updates, and NIST CSF remediation documentation.
• Documentation & Security Awareness
  • Support KnowBe4 campaign administration: track completion rates, pull reporting data, and flag non-completion for follow-up.
  • Maintain accurate documentation of completed tasks, findings, and escalations. Use AI tools to accelerate documentation and draft initial content for senior review.

Qualifications
Required

• Graduated in Winter 2025 or Spring 2026 with a Bachelor's degree in Cybersecurity, Computer Science, Information Technology, or related field.
• Foundational understanding of cybersecurity concepts: CIA triad, common attack types, network fundamentals, and basic security controls.
• Exposure to GRC concepts - SOC 2, NIST CSF, or compliance frameworks - through coursework, certification study, or internship.
• Strong written communication. You document clearly and completely.
• Active daily use of AI tools - at Momentum, we have 100% internal AI adoption.
• Genuine curiosity about security: threat news, home labs, security blogs.

Preferred Certifications

• Security+ or equivalent entry-level certification: CompTIA Security+, Google Cybersecurity Certificate, or similar.

Preferred Technical Experience

• Hands-on experience with SIEM platforms, vulnerability scanners, or MDR tooling through coursework, labs, or CTF competitions.
• Exposure to CrowdStrike, Okta, Jamf, or similar enterprise security tooling.
• Basic scripting or automation in Python, Bash, or PowerShell applied to a security or IT task.
• Internship or co-op experience in IT, security operations, or GRC.

Commitment to Diversity and Inclusion at Momentum
At Momentum, our commitment to change for the better is reflected in our dedication to fostering a culture of belonging, inclusion, and diversity. We recognize diversity and inclusion as key components of our company's success and growth. Recognizing the ongoing journey ahead, we are determined to make lasting impacts through the collective efforts of our Leadership team, People & Culture team, and every employee.
Momentum is an equal opportunity employer, considering all qualified applicants regardless of characteristics protected by law. These include, but are not limited to, race, color, religion, sex, sexual orientation, gender identity, national origin, age, disability, genetic information, color, ancestry, and Veteran status. We actively seek qualified applicants from diverse backgrounds, with no consideration of criminal histories, in alignment with applicable legal requirements.
Should a reasonable accommodation be necessary for the application process and beyond, we are eager to review and provide reasonable accommodations as needed, in compliance with applicable laws.
Total Rewards
At Momentum, we prioritize the well-being of the whole individual. We are committed to supporting our people in every moment that matters on their journey with us! We are pleased to offer a comprehensive total rewards package designed to provide protection, peace of mind, and a focus on overall well-being while helping our people plan for the future.
The base salary range for this position may vary based on location. Actual compensation will be determined by role, level, and location, considering additional factors such as job-related skills, experience, and relevant education or training. For roles eligible for remote work, the base salary is tailored to the designated work location. In addition to the base salary, candidates may be eligible to receive a discretionary annual bonus, determined based on both the company's business performance and individual contributions. The People & Culture team will provide specific details during the hiring process.
We take pride in offering a comprehensive benefits package for our full-time employees, encompassing healthcare benefits, a 401(k) plan with an employer match, short-term and long-term disability coverage, life insurance, paid time off, parental leave, and various paid holidays, among other perks.
Our workplace offers opportunities for involvement in a wide range of challenging and impactful projects, across diverse industries and business models, fostering career advancement and development within our growing organization. The culture is highly collaborative and supportive, contributing to a fulfilling professional journey.
Note on Confidentiality
Any personal data collected during the application process will be treated with the utmost confidentiality and privacy.