Intern for GRC, cyber- and information security at the Danish Health Authority

Internship for GRC, cyber- and information security at the Health Authority

Do you want practical experience with Governance, Risk & Compliance (GRC) and learn how cyber- and information security work in a government authority? As an intern at the Health Authority, you will have the opportunity to work closely with our specialists and translate your academic knowledge into concrete tasks within, among other things, risk management, information security, and compliance.

About the Secretariat

The Danish Health Authority is Denmark’s supreme authority in health-related matters and part of the Ministry of Health and the Minister for Health and Church. We advise the minister as well as other state, regional and municipal authorities and play a central role in the development of the Danish health system.

The Secretariat advises the board and management and supports the Health Authority in making sound professional and strategic decisions. At the same time, we work to create the framework for a secure and well-functioning organization.

We are about 25 employees with different professional backgrounds, including law, economics, political science, and other social science educations. The Secretariat consists of five teams: the directorate secretariat, international coordination, economics, HR and IT/law.

The internship position is placed in the IT/law team, where we among other things work with data protection, cyber- and information security, as well as risk management and compliance.

Your internship with us

As an intern you will be part of the Health Authority’s work with GRC within cyber- and information security.

You will work closely with the Authority’s data protection lawyer and information security coordinator. Along the way, you will gain insight into how a public authority translates requirements, standards and risk assessments into concrete policies, processes and security measures.

The internship gives you the opportunity to both follow the work and contribute to concrete tasks. We tailor as much as possible the tasks to your academic background and interests.

You may, for example, work with

• Governance and compliance: contribute to the work with the Health Authority’s management system for information security and support the work with requirements and standards, including ISO 27001
• Risk management: participate in the preparation and maintenance of risk and security assessments, including in connection with new IT systems and projects
• Policies and guidelines: help prepare, update and implement internal policies, procedures and guidelines for cyber- and information security
• Controls and documentation: contribute to creating an overview of security requirements, controls and documentation and follow up on how they are complied with
• IT preparedness: gain insight into and contribute to the Authority’s ongoing work with IT preparedness and continuity
• GRC in practice: help translate legal, organizational and technical requirements into concrete solutions in a public organization.

Thus, you gain practical experience with the whole spectrum from governance and compliance to risk assessment and implementation. At the same time, you get insight into the special frameworks and requirements that apply to information security and data protection in the state.

Your education, experience and personal qualifications

You are pursuing a relevant higher education where you can do an internship as part of your studies. Your education could be within IT, cybersecurity, information security, digitization, social science or a related field. Your specific educational direction is less important than your interest in how technology, risks, rules and organizational processes relate to each other.

We imagine that you

• are curious about cyber- and information security and would like to learn more about GRC
• are interested in risk management, compliance and working with standards and requirements
• are interested in IT and understand or want to learn about the interaction between technology and organization
• work in a structured way and have a sense for both details and context
• can understand complex issues and communicate them clearly
• articulate yourself well in Danish both in writing and spoken
• are keen to learn and at the same time take responsibility for concrete tasks.

We do not expect you to already be a specialist in GRC, ISO 27001 or information security. The most important thing is that you have a solid professional foundation, are curious and want to translate your knowledge into practice.

We offer

With us you will have the opportunity to gain practical experience with GRC and information security in a complex public organization.

You will gain, among other things

• experience with concrete GRC processes in a government authority
• practical knowledge of risk management, compliance and information security
• insight into working with ISO 27001 and management systems for information security
• experience with the collaboration between legal, organizational and technical professional fields
• opportunity to work on tasks that have significance for security in a central Danish authority
• professional sparring with colleagues who work professionally with information security, data protection and IT.

The internship is therefore relevant for you if you are considering a career in e.g. GRC, information security, cybersecurity, IT risk, compliance or public digitalization.

Practical information

The internship period runs from February 1, 2027 to June 30, 2027.

It is essential that you can get credit and earn ECTS points during the internship period. We are flexible in fulfilling the requirements of your study plan.

Working hours are 30-37 hours per week, but we are flexible regarding possible teaching, exam periods or student jobs. Please indicate in your application how many ECTS points you will earn and how many hours per week you would like and are able to be in internship.

The internship is unpaid.

Feel free to contact us

Learn more about the position by calling Senior Consultant Sofie Eden Ekstrøm at 20493945 or Senior Consultant Jonathan Faarborg Lehmann at 23 27 72 01.

Are you interested?

Click on "apply for the position" and send us your application with CV and transcripts. Recruitment interviews are expected to be held in 44. You can read more about us at sst.dk.

Application deadline: Oct 22, 2026

Department: Islands Brygge 67 2300 Copenhagen S

Location: Copenhagen