Compliance Internship - 6 Months

About this role

Who we are

Luxembourg National Data Service (LNDS) is a brand of PNED G.I.E. an organisation created by the Luxembourg Government, to implement Luxembourg’s strategies in research, innovation, and digitalisation. LNDS enables value creation from secondary use of data, for public and private partners and supports the sharing and re-use of public sector data, in a trustable manner. The LNDS service portfolio includes know-how, capabilities, tools, infrastructure, and data services.

Through efficient & responsible use of data and improving the secondary use of data, LNDS will support the acceleration of economic, ecological, and societal transitions.

Purpose of the job / project

You will work closely with a multidisciplinary team to support the GRC (Governance, Risk and Compliance) Team.

What you will do

• GRC, Privacy and IT security compliance:
• Supporting the Compliance team into maintaining the GRC framework of the organization
• Supporting the compliance team in privacy control ISO 27001 and 27701
• Onboarding suppliers & project internal assessments (process improvement, PIAs, DPIAs…)
• Legal reviews (DPAs, IT contracts…)
• AI compliance
• AI Compliance by Design: Support project and development teams in integrating applicable AI compliance and GRC requirements throughout the solutions lifecycle
• AI Governance & Control Framework: Support the implementation of a coordinated AI framework (Asset inventory, controls, roles & responsibilities, monitoring…)

Who you are

• Master’s degree in Law, GRC, Business Administration or related field
• Certifications such as CIPP/E, CIPM, ISO 27001, ISO 27701, ISO 42001 or COSO certificates are a plus
• Good sense of autonomy
• Being able to liaise with technical developers on AI security related topics. A first pivotal experience (e.g. in-house) is a plus
• Learning-by-doing mindset
• Comfortable and eager to use new IT tools (Atlassian, Copilot, Sharepoint…)