Artefact is a global data and AI consultancy that helps organizations create value from data, technology, and artificial intelligence. Artefact Netherlands collaborates with clients on data-driven transformation, analytics, AI, digital marketing, and technology implementation.

As our organization continues to grow, the importance of information security is increasing for our clients, partners, and internal operations. To enhance our security posture and comply with regulatory and customer requirements, Artefact Netherlands is preparing to implement an Information Security Management System (ISMS) and work towards ISO 27001 certification.

De rol

Artefact Netherlands is looking for a proactive graduation intern who will support the implementation of the ISMS and assist in preparing the organization for ISO 27001 certification. The internship aims to help reduce information security risks, improve governance, and ensure compliance with relevant regulations and customer requirements. A significant aspect of this role is achieving readiness for ISO 27001 certification.

You will collaborate closely with the Artefact project manager and will have access to relevant policies, systems, documentation, and internal stakeholders. Additionally, you will receive support from Artefact’s headquarters in France, providing knowledge, feedback, and alignment with the broader organization.

Verantwoordelijkheden

During the internship, you may engage in activities such as:

• Conducting an ISO 27001 gap analysis against the current situation.
• Assisting in defining the ISMS scope.
• Mapping relevant assets, processes, stakeholders, and information flows.
• Supporting the establishment of a risk assessment methodology.
• Creating or enhancing the information security risk register.
• Identifying necessary ISO 27001 controls and evaluating their applicability.
• Aiding in the development of a draft Statement of Applicability.
• Reviewing and refining information security policies and procedures.
• Helping define evidence requirements for certification readiness.
• Supporting awareness and communication initiatives within the organization.
• Preparing a practical roadmap for ISO 27001 certification.
• Documenting findings and recommendations in a graduation thesis.

The specific scope of the assignment will be aligned with the student’s study program, interests, and graduation requirements.

Vereisten

We are looking for a curious student interested in the intersection of information security, business processes, risk management, governance, and organizational change. You should be studying in a relevant field such as Business IT & Management, HBO-ICT, Cyber Security, Information Security, Information Management, Business Information Technology, IT Service Management, Information Science, or Risk Management/IT Governance.

You do not need to be an ISO 27001 expert yet, but you should be motivated to learn and enjoy working on topics where technology, organization, risk, and compliance intersect. To succeed in this role, you bring:

• Analytical skills: Ability to understand complex processes, identify gaps, structure information, and translate findings into actionable recommendations.
• Affinity with information security: Interest in cybersecurity, risk management, compliance, governance, or related topics. Knowledge of ISO 27001 is a plus.
• A structured approach: Ability to organize work, document findings clearly, and manage deliverables independently.
• Strong communication skills: Comfort in engaging with various stakeholders and translating complex topics into clear language.
• Critical thinking and pragmatism: Ability to assess risks, challenge assumptions, and balance security requirements with business needs.
• Availability: Commitment to a 5-6 month graduation internship and ability to work in a hybrid setup from our Utrecht office.

Wat je zult leren

This internship provides the opportunity to gain practical experience with a real ISO 27001 implementation project in a professional consultancy setting. During the internship, you will learn how to:

• Establish and structure an Information Security Management System.
• Understand the practical application of ISO 27001.
• Conduct a security gap analysis.
• Perform or assist in information security risk assessments.
• Translate security risks into concrete improvement actions.
• Work with governance, policies, procedures, controls, and evidence.
• Prepare an organization for certification readiness.
• Engage with stakeholders across business, technology, and management.
• Balance compliance, risk reduction, and practical implementation.
• Work in an international organization with support from both local and global stakeholders.
• Develop a graduation thesis with direct practical relevance.

You will gain valuable experience in information security governance, risk management, and compliance, which are essential skills for future roles such as information security officer, security consultant, IT risk consultant, privacy/security analyst, business IT consultant, or GRC specialist.

Wat wij bieden

• A competitive internship salary, an NS Business Card for travel to the office, excellent office lunches, a strong company culture, and other employee benefits.
• A clearly defined graduation assignment with practical business relevance.
• Close collaboration with an Artefact project manager.
• Dedicated mentorship and guidance throughout the internship.
• Access to relevant policies, systems, documentation, and stakeholders.
• Support from Artefact headquarters in France.
• Exposure to a professional data, AI, and technology consultancy environment.
• Dedicated time to work on your graduation thesis (approximately two days per week).
• The chance to make a significant contribution to Artefact Netherlands’ information security maturity.

Ben je geïnteresseerd? Zoek je een graduation internship in informatiebeveiliging, ISO 27001, risicomanagement en IT-governance? We horen graag van je. Stuur je CV en een korte motivatie waarin je uitlegt waarom deze opdracht je aanspreekt.

Mogelijke onderzoeksvraag

Een mogelijke graduation onderzoeksvraag zou kunnen zijn: Hoe kan Artefact Nederland een effectief en pragmatisch Informatiebeveiligingsmanagementsysteem implementeren om informatiebeveiligingsrisico's te verminderen en klaar te zijn voor ISO 27001-certificering? Deze onderzoeksvraag kan verder worden verfijnd in overleg met de student en de onderwijsinstelling om ervoor te zorgen dat deze voldoet aan de afstudeervereisten.