SPH Media Limited – Cybersecurity and Data Privacy Intern

1. Governance, Risk & Compliance (GRC) Operations

Policy & SOP Development: Assist in drafting, reviewing, and updating Information Security Policies, Standards, and Standard Operating Procedures (SOPs).

Framework Alignment: Help map internal controls against key regulatory frameworks, specifically CCOP (Cybersecurity Code of Practice), PDPA (Personal Data Protection Act), and ISO 27001.

Audit Readiness: Coordinate with stakeholders to gather, organize, and validate evidence required for internal and external audits.

Compliance Monitoring: Conduct periodic checks to ensure staff adherence to security SOPs (e.g., access control reviews, clear desk policy) and assist in tracking remediation actions for identified gaps.

2. Innovation & AI Integration Projects

Productivity Tool Development: Utilize Google AppSheet to build internal applications that replace manual tracking methods (e.g., creating an app for Risk Registers, Vendor Assessments, or Policy Acknowledgments).

AI-Enabled Workflows: Explore and implement Generative AI models to streamline GRC tasks, such as automating meeting minutes, summarizing regulatory documents, or drafting compliance memos.

AI Governance: Research emerging risks associated with AI usage and contribute to the development of the organization's "Responsible Use of AI" guidelines.

Skills & Knowledge Framework Familiarity: 

Basic understanding of ISO 27001 concepts, data privacy principles (PDPA), or critical infrastructure protection (CCOP).

 Google Workspace Savvy: Proficient in Google Slides (for presentation decks), Google Sheets (data organization), and Google Keep/Notes. 

Low-Code & Automation: Familiarity with Google AppSheet or a strong willingness to learn it to build business solutions. 

AI Literacy: Knowledge of AI models (e.g., LLMs) and an interest in how they can be applied to business governance. 

Soft Skills Communication: Ability to translate complex technical requirements into simple instructions for non-technical staff.

 Curiosity: A proactive attitude toward learning new tools to solve old problems.