Sprinto Security Compliance Internship: remote India work in GRC and audit

About the audit-experience internship

Sprinto works on software that helps organisations manage security and compliance programmes. This internship is specifically in its Audit Experience function, supporting the relationships and operational information behind audit partnerships. The position offers exposure to governance, risk and compliance, commonly shortened to GRC, through practical work with a subject-matter expert. It is a remote India opportunity rather than a penetration-testing or security-operations internship.

Audit partners and operational coordination

The intern follows audit partners through onboarding and enablement, maintains trackers and coordinates with colleagues when a dependency holds up progress. Another responsibility is keeping the auditor directory accurate: checking accreditation against the appropriate bodies and updating partner profiles. These tasks depend on careful verification because other people use the records to make decisions about audit partners.

Evidence mapping and query support

The role includes preparing reference information that connects audit-evidence requirements with platform capabilities. The intern helps identify missing information, records findings and supports follow-up with the specialist. Routine partner and internal queries are handled at the first point of contact; unusual questions are escalated. SOC 2 and ISO 27001 are the frameworks expressly mentioned in the description.

Education and relevant prior exposure

Sprinto requests a completed graduation or master’s qualification in GRC, information security, risk management, computer science or a related field. A directly relevant GRC or audit academic background is strongly preferred. Previous audit exposure through coursework, an internship or professional work is a strong advantage, although the advert does not prescribe a minimum number of years.

Tools, writing and automation interests

Comfort with spreadsheets, tracking data and written documentation matters alongside attention to detail. The employer also expects willingness to use generative-AI tools such as Claude, ChatGPT or Gemini. Work can include testing prompts or small agent workflows for repeat queries, directory reviews and evidence lookups. Prior automation experience is helpful; the notice also values an applicant who is ready to experiment and learn.

Location, stipend and internship terms

The role is listed for remote work in India. The employer has not published a numerical stipend, fixed internship duration or closing date in the material reviewed. It also does not give a guaranteed conversion arrangement. Ask the recruiting team about working hours, supervision, expected start date and the internship agreement before making plans around the position.

How to submit the application

Use the Sprinto Lever application linked under Important links, matching requisition b0f52d4a-c9ac-414d-86c9-2f2f35868aef. Complete the employer form with your current contact information and an accurate résumé. A résumé submitted to a different Sprinto internship is not a substitute for this role’s application. The original employer page controls whether applications are still accepted.

Practical preparation: choose evidence of careful work

For this role, a useful résumé example would explain how you checked a dataset, maintained a project tracker or mapped a security control to supporting evidence. Describe your own contribution and the way you verified the result. If you experimented with AI, explain what remained under human review. This is preparation guidance, not an additional portfolio requirement announced by Sprinto.

Questions to clarify with the recruiting team

Ask how the internship divides time between partner operations, evidence work and automation, and what access or training is provided for sensitive audit material. It is also sensible to clarify the reporting cadence for remote work. The advert does not publish a fixed selection-round sequence, so an assessment pattern or promised interview date should not be assumed.

Relevant skills

• GRC
• SOC 2
• ISO 27001
• Audit evidence
• Spreadsheets
• Generative AI