Compliance Analyst Internship - Vendor Risk Specialization

OpenSesame: Compliance Analyst Internship - Vendor Risk Specialization

About OpenSesame

At OpenSesame, we’re on a mission to unlock the full potential of the world's workforce by helping companies build skillful, agile teams. Our comprehensive library of over 60,000 top-tier eLearning courses empowers businesses to develop their people, fueling success and driving results. But at the heart of what we do, it’s not just about selling courses—it’s about transforming careers and helping people thrive in their roles.

We’re at an exciting crossroads in our growth journey, with expanding products, an ever-growing partner network, and a customer base that’s eager for more. We’re ready to scale even further, and we need the brightest minds to help us get there.

www.opensesame.com/about

Internship Overview

OpenSesame seeks passionate, driven students to join us for a paid internship program. Suppose you’re intelligent, curious, and full of fresh ideas. In that case, this is your chance to collaborate with an exceptional team and gain hands-on experience in a fast-paced, growth-focused environment.

As a Compliance Analyst Intern with a vendor risk specialization, you’ll work on real-world compliance and security challenges, contribute to impactful solutions, and collaborate with teams across OpenSesame to strengthen our security and compliance posture.

About the Security and Compliance Team

At OpenSesame, our Security and Compliance Team ensures our company meets the highest industry standards and regulatory requirements. We focus on compliance with ISO 27001, SOC 2, GDPR, and other security frameworks, vendor risk assessments, incident response, and policy enforcement.

Our team partners across departments to mitigate risks, respond to security threats, and maintain a strong security culture. Through continuous learning and innovation, we protect the organization and help drive secure business growth.

Performance Objectives

2 Weeks

• Gain hands-on experience with GRC compliance tools such as Drata and in particular the Vendor Risk Assessment workflows.
• Get a basic understanding of security frameworks like ISO 27001, ISO 27701 and SOC 2 and how vendor risk management plays an important role in audit and security processes.
• Shadow team members to understand team security and compliance workflows.
• Begin familiarity with JIRA, Confluence, and other project management tools for tracking compliance-related tasks and projects.

30 Days

• Assist in collecting and reviewing documentation for vendor reviews using our GRC tool.
• Use JIRA and Confluence to track tickets and document processes.
• Assist in managing and maintaining our Trust Center portal for customers requests.
• Support other compliance initiatives, including contributing to the review and implementation of specific training such as phishing simulations and other courses in collaboration with the People Team.

60 Days

• Take ownership of assigned compliance tasks, contributing independently to projects.
• Become comfortable owning several compliance processes, including regular vendor review steps.
• Learn the Quarterly User Access review process and take ownership of driving the related JIRA issues and Drata tasks to completion by working with IT teams and other stakeholders.

Additional Program Details

Eligibility:

• Must be a current student enrolled in a college/university program or have graduated within the past 12 months (undergraduate, postgraduate, or associate programs accepted)

Application Closes:

• Friday, Oct 10, 2025

Program Dates:

• Projected Start Date: Tuesday, November 4, 2025
• Projected End Date: Friday, February 27, 2026

Commitment:

• Full-time (32 to 40 hours/week) for 16 weeks
• Must commit to working regular office hours in the US continental time zones (e.g. from 9 AM EST to 5 PM EST or 9 AM PST to 5 PM PST within Monday to Friday period)

Compensation:

• Standard: $18/hour

Fully Remote Role: Interns must have a personal computer and access to consistent high-speed internet during working hours.

Ready to make an impact? Apply now and bring your creativity, energy, and problem-solving skills to OpenSesame. We’re excited to see what you’ll bring to the table!

Location: This position can be based anywhere in the U.S.

Equal Employment Opportunity: OpenSesame is an Equal Employment Opportunity and Affirmative Action employer that values and welcomes diversity. We do not discriminate on the basis of various legally protected characteristics, including criminal history, and strive to provide reasonable accommodations to qualified individuals with disabilities. We prioritize safety and security and may use your information accordingly, and you can contact us for assistance or accommodations during the job application process.

CPRA (California Candidates): When you submit your application, OpenSesame may collect and use your personal information in accordance with our privacy policy and the CPRA. This may include personal details and employment history, and will only be used for employment-related purposes. We may share this information with third-party service providers, but we will not sell it to third parties. If you have any questions or concerns, please contact us, and for more information on your rights under the CPRA, refer to ourprivacy policy or the California Attorney General's website.