Governance, Risk & Compliance (GRC) Intern

Who We Are: At Huda Beauty, our Vision is to lead in creating a democratized beauty industry where power is given back to people to define, create, and enjoy beauty for themselves! Launched by award-winning beauty powerhouse Huda Kattan in 2013, Huda Beauty is one of the world’s fastest growing beauty brands. As a company, we are fueled by purpose and not profit, this allows us to approach things differently so that we can create products, content, and a community like no other. A lot has changed since our launch in 2013, but something that will forever remain at the core of Huda Beauty is our focus on business excellence and our unwavering passion for kindness!

Summary: We are look for a Governance, Risk and Compliance (GRC) Intern to support the GRC function with the day-to-day execution of core GRC activities, including work across governance frameworks, risk assessments, third-party due diligence, and compliance initiatives. The role is ideal for someone with a strong interest in governance, compliance, risk management and data privacy.

Please note that this internship is 6-month fixed-term contract.   What You Will Gain: • Hands-on exposure to real-world governance, risk, and compliance activities within a global organisation • Practical experience supporting data privacy, risk, and third-party due diligence programmes • The opportunity to develop highly transferable skills in risk assessment, documentation, and stakeholder coordination • Direct learning from senior stakeholders and the chance to contribute meaningfully to a growing GRC function

  Essential Duties and Responsibilities: Risk & Compliance Support • Assist with preparing and maintaining risk assessments, trackers, and registers • Support delivery of agreed governance, risk, and compliance plans and roadmaps • Track actions, milestones, and deliverables across GRC initiatives

Data Privacy • Support data privacy activities such as record-keeping, assessments, and document audit trails • Assist with DPIAs, gap assessments, and privacy programme tracking

Third-Party Due Diligence • Support third-party and vendor due diligence processes • Assist with information gathering, risk screening, and documentation • Maintain due diligence records and follow-up trackers

Governance & Policy Support • Assist with policy and SOP documentation, coordination, and version control • Support governance reporting and preparation of materials • Help maintain central registers (policies, training, compliance actions)

General GRC Administration • Collate data for reporting and leadership updates • Support training logistics, attendance tracking, and materials • Provide general administrative and organisational support to the GRC function