

As an Information Security & Defence Compliance Intern, you will support the design and implementation of Fiducial’s internal security and compliance framework in a highly regulated and security-sensitive environment. This role combines governance, compliance, and technical understanding. You will not be building production systems, but you are expected to understand how systems work and how security applies to them. Your work will include: Supporting the setup of our Information Security framework (based on ISO 27001 principles) Assisting in implementing defence-oriented security practices (e.g. need-to-know access, controlled environments, strict data handling) Translating security requirements into practical guidelines for engineering teams Mapping systems, data flows, and access patterns across our infrastructure Supporting secure configuration practices (access control, secrets handling, device security) Structuring and documenting internal policies (access control, asset management, data classification, etc.) Helping define and maintain asset registers, risk registers, and classification schemes Supporting export-control-related processes from a security perspective (controlled releases, data access, segregation) Identifying gaps between current practices and required security standards You will work closely with both leadership and engineering teams, acting as a bridge between technical implementation and security/compliance requirements. You are expected to engage with engineers and understand systems, but your role is to structure, not to build.