Your area of work:

The Transformation Office provides robust project management and information security capabilities to the CTO organization. Within Transformation office, the Information Security, Risk & Regulatory unit drives continuous improvement of the CTO's security posture through measurable outcomes.

As an intern (f/m/d) you will support the migration CTO teams to modernize its access control governance by transitioning from static, document-based authorization concepts to a dynamic Digital Authorization Concept (DAC).

The main objective of this internship is to master the DAC framework, understand its functional and security requirements, and serve as a central guide and facilitator for Application Owners, Technical Reviewers, and Business Owners across the organization to ensure their applications are accurately modeled and compliant.

Your responsibilities:

• You act as the first point of contact for Application Owners, Technical Reviewers, and Business Role Owners implementing or updating their DAC
• You guide stakeholders through the end-to-end DAC lifecycle, from initial asset description to final approval
• You host walkthroughs and support sessions to explain attribute requirements, role definitions, and workflow steps
• You review submitted DACs for accuracy and completeness, ensuring required fields are properly documented (e.g., entitlement descriptions, business criticality, tier levels, access types, and environment tags)
• You track and monitor DAC approval lifecycles across all mandatory approval gates (Business Role Owner, Technical Reviewer, and Legal Entity reviewers)
• You collect user feedback to propose usability and process improvements to the IAM Core Team

Your profile:

• You are enrolled in or recently graduated from a relevant field such as Computer Science, Information Security, Business Informatics, Information Systems, or a related discipline
• You have basic understanding of Information Security and Identity & Access Management (IAM) concepts (Role-Based Access Control / RBAC, entitlements, principle of least privilege, Segregation of Duties / SoD)
• You have strong analytical skills with high attention to detail and structured thinking
• You are customer-oriented, collaborative attitude with patience in explaining technical/governance requirements to non-security stakeholders
• You are able to work independently in an international, multicultural corporate environment
• You are fluent in written and spoken English (corporate language); German or French is an asset
• Prior exposure to tools like SailPoint IIQ, NEXIS, Jira, or Confluence is an advantage, but not required

Start date: 01/12/2026