Hire Governance Risk Compliance Intern — the employer’s brief

None professionally, and that is the point. What you should expect is evidence: something built, run or fixed involving GRC tooling or spreadsheets or Policy templates, that they can talk about in depth. Screen on writing a rule people can actually follow and structured estimation when there is no data; treat everything else on the list as trainable during the term.

Yes, within a scoped brief. Rewrite one policy so a normal person can follow it without a lawyer is achievable in a term with weekly review, and it is genuine output rather than a training exercise. What does not work is open-ended ownership of anything with production consequences — keep the judgement calls with the reviewer and the execution with the intern.

₹14,000 to ₹34,000 a month covers most of the market for this role. Metro product companies pay at the top of the band; tier-2 cities and services firms 25–40% lower. An unpaid listing filters for who can afford to work free rather than who is good, and roughly halves the applications you receive.

For a first pass, yes. Ask "What makes an audit finding legitimate rather than pedantic?" and judge whether the answer is specific and consistent — you are checking for judgement about control intent, which does not require you to know the subject. A GRC practitioner should still take the second round, because at that point you are assessing depth rather than authenticity.

One finished, reviewed piece of work that someone on the team would otherwise have done — not a side project nobody adopts. The deliverables above are sized for eight to twelve weeks of supervised work by a student with the fundamentals but no production experience. If they can demo it and the team keeps using it after they leave, the hire paid for itself.

A governance brief means writing rules other people must follow. Have the intern test any rule with two real users before it is published, or it will be ignored. In screening terms, that means adding one specific check: writing a rule people can actually follow.

A risk qualifier means the work is about what could happen rather than what did. Screen for structured estimation, since most of the data the intern needs will not exist. In screening terms, that means adding one specific check: structured estimation when there is no data.

First applications typically arrive within about two hours of the listing going live, and most employers hiring a GRC intern have a workable shortlist inside a week. Speed depends more on how specific the brief is than on the stipend — a listing with a named project and named tools consistently outperforms a generic one at the same money.

Yes. One listing is free and goes live after a quick company verification, usually inside two working days. Paid plans start at ₹499 for five postings a month, publish instantly with no review wait, and unlock every applicant's résumé and contact details. Both routes reach the same candidate pool.