About this role
Your area of work: The Transformation Office provides robust project management and information security capabilities to the CTO organization. Within Transformation office, t he Information Security, Risk & Regulatory unit drives continuous improvement of the CTO’s security posture through measurable outcomes. As an intern (f/m/d) you will support the migration CTO teams to modernize its access control governance by transitioning from static, document-based authorization concepts to a dynamic Digital Authorization Concept (DAC). The main objective of this internship is to master the DAC framework, understand its functional and security requirements, and serve as a central guide and facilitator for Application Owners, Technical Reviewers, and Business Owners across the organization to ensure their applications are accurately modeled and compliant.
Your responsibilities
You act as the first point of contact for Application Owners, Technical Reviewers, and Business Role Owners implementing or updating their DAC You guide stakeholders through the end-to-end DAC lifecycle, from initial asset description to final approval You host walkthroughs and support sessions to explain attribute requirements, role definitions, and workflow steps You review submitted DACs for accuracy and completeness, ensuring required fields are properly documented (e.g., entitlement descriptions, business criticality, tier levels, access types, and environment tags) You track and monitor DAC approval lifecycles across all mandatory approval gates (Business Role Owner, Technical Reviewer, and Legal Entity reviewers) You collect user feedback to propose usability and process improvements to the IAM Core Team
Your profile
You are enrolled in or recently graduated from a relevant field such as Computer Science, Information Security, Business Informatics, Information Systems, or a related discipline You have basic understanding of Information Security and Identity & Access Management (IAM) concepts (Role-Based Access Control / RBAC, entitlements, principle of least privilege, Segregation of Duties / SoD) You have strong analytical skills with high attention to detail and structured thinking You are customer-oriented, collaborative attitude with patience in explaining technical/governance requirements to non-security stakeholders You are able to work independently in an international, multicultural corporate environment You are fluent in written and spoken English (corporate language); German or French is an asset Prior exposure to tools like SailPoint IIQ, NEXIS, Jira, or Confluence is an advantage, but not required Start date: 01/12/2026