Job Description: 
About C&R Software: 

 

C&R Software (www.crsoftware.com) provides expertise in Credit Risk Management domain and delivers optimized SaaS (AWS) based solutions across the Collections & Recovery lifecycle, empowering organizations to manage their end-to-end collections operation more effectively and compliantly. We have been in the industry for ~40 years. We operate out of 16 countries and our customers are based out of 60 countries across the globe. Our Vision is to Humanize Collections and our Values are Diversity, Simplicity, Respect, Bravery, and Responsibility. 

 

Position description – Intern 

 

Job description: 

 

A Security GRC (Governance, Risk, and Compliance) intern assist the company's cybersecurity and compliance programs by assisting with risk assessments, policy development, and internal/external customer audits. Key responsibilities include helping with documentation, performing gap analyses against standards like ISO 27001, and using GRC tools for tracking and reporting of remediation. The role involves collaboration with engineering, IT, legal, and audit teams to ensure adherence to policies and to help improve the organization's risk posture.  

 

Role / Responsibilities: 

 

Qualified candidates are being considered for Internship at C&R Software, India.  These candidates possess a strong educational background in Cybersecurity, Computer Engineering or Computer Science and are expected to work on small to medium-scale cybersecurity practices. 

Assist with conducting and documenting risk assessments and third-party vendor risk assessments. Help with tracking and monitoring compliance with security policies and customer requirements. 

Assist the development and update of security policies, standards, and procedures. Gather documentation and maintain records for compliance initiatives.  

Assist with internal and external audits, assessments, customer questionnaires, remediation and help monitor security controls. Support the execution of control reviews and provide input for improving control effectiveness.  

Use GRC tools to help streamline reporting and manage risks. Assist in tracking key performance indicators (KPIs) and key risk indicators (KRIs).  

Work with engineering, operations, and other business units to integrate security and compliance into their work. Support security awareness and training initiatives in the organization.  

Collaborate with engineering teams to ensure projects meet security standards from the outset.  

Assist with implementing and maintaining security controls and protocols.  

Assist the deployment of new security technologies and processes for risk detection and response.  

Help with incident management, business continuity and disaster recovery efforts, which often involves close coordination with technical teams.  

 

Essential Technical skills 

An understanding of cloud environments, their shared responsibility models, and built-in security tools is critical. 

Platforms: AWS, Azure, or Google Cloud (GCP). 

Automation and Scripting: The ability to automate tasks is a hallmark of GRC. 

Scripting: Proficiency in scripting languages like Python, PowerShell, or Bash for automating evidence collection, monitoring, and reporting. 

Basic understanding of security tools DLP, Email security, Active Directory, SIEM etc 

 

 

Skills / Education Requirements: 

 

Undergraduate / Graduate in Computer Science or Computer Applications such as B. Sc. / B.C.A. /  

B. Tech. / B. E. / M. Sc. / M. Tech. / M. E. / M.C.A.  

Good technical aptitude to understand & use different technologies 

Basic Knowledge of cybersecurity practices and high-level framework ISO 27001, PCI, SOC, NIST 

Pursuing relevant certifications (CompTIA Security+, ISC² CC) 

Hands-on lab experience (TryHackMe, Hack the Box, cloud labs) 

Volunteer GRC work or relevant project experience 

Knowledge of Database Query Tools / Technologies such as SQL / PL-SQL etc. preferred 

Good Knowledge of UI programming concepts/languages such as Angular, Java etc. preferred 

Familiarity with diverse AI platforms, applications, and specialized tools  

Knowledge of various LLMs, their capabilities, limitations, and optimal use cases 

Understanding of autonomous AI systems & agent-based artificial intelligence solutions 

Strong analytical thinking 

Good communication skills including verbal and writing skills