Privacy Intern

Xpansiv

Location not specified

Internship

Posted April 14, 2026

$20 - $25/hr

Energy Trading

~61 people viewed this recently

Apply Now

Application opens on company website

Job Description

The Privacy Intern supports the Risk Compliance Department in developing and maintaining GDPR privacy programs, including mapping obligations, updating processing registers, and contributing to broader privacy documentation and governance activities.

Key Responsibilities

Support development and maintenance of GDPR privacy obligation matrices, mapping obligations to controls, owners, evidence, and documentation requirements
Assist in reviewing and updating Records of Processing Activities (RoPA) and processing register documentation for EU operations
Conduct research on international privacy obligations and interpret requirements into practical documentation and program artifacts
Partner with internal stakeholders to collect information such as processing purposes, data categories, retention, transfers, and security measures
Identify documentation gaps and propose improvements to privacy governance processes and templates
Help prepare materials to support privacy program buildout, including procedures, playbooks, trackers, and audit-ready evidence files
Maintain organized, high-quality documentation with strong version control and traceability

Requirements

Currently pursuing a later-stage undergraduate degree or a graduate degree; a Master’s or Juris Doctor law degree is preferred in a related field such as law, privacy, compliance, risk management, information security, public policy, or business.
Strong understanding of GDPR concepts and key privacy program structures such as Records of Processing Activities (RoPA), lawful bases, Data Protection Impact Assessments (DPIAs), data subject rights, data transfers, and controller/processor roles.
Exceptional attention to detail and ability to produce clear, well-structured, organized, and audit-ready documentation.
Self-motivated, driven, and comfortable working independently with minimal supervision.
High curiosity and willingness to learn and ask thoughtful questions.
Strong written communication skills and stakeholder coordination skills.
Ability to assist in reviewing and updating Records of Processing Activities (RoPA) and related processing register documentation for EU operations.
Ability to support development and maintenance of GDPR privacy obligation matrices, mapping obligations to controls, owners, evidence, and documentation requirements.
Ability to conduct research on international privacy obligations and interpret requirements into practical documentation and program artifacts.
Ability to partner with internal stakeholders to collect required information such as purposes of processing, data categories, retention, transfers, processors/sub-processors, and security measures.
Ability to identify documentation gaps and propose improvements to privacy governance processes and templates.
Ability to help prepare materials to support privacy program buildout, including procedures, playbooks, trackers, and audit-ready evidence files as time permits.
Experience or coursework with international privacy regulations such as EU and UK GDPR, U.S. state privacy laws (preferred but not required).
Exposure to privacy operational artifacts such as DPIAs, PIAs, vendor processor assessments, and transfer impact assessments (preferred but not required).
Comfort working with structured trackers and matrices, Excel sheets, and maintaining documentation quality at scale.
Familiarity with common privacy or Governance, Risk Management, and Compliance (GRC) tooling such as OneTrust or similar (not required).