About Zenero
Zenero is a carbon and sustainability software company helping fashion and lifestyle brands trace their supply chains, meet global compliance requirements, and turn verified impact data into consumer-facing marketing. Our platform powers Digital Product Passports, Carbon Labels, Carbon Accounting, and Lifecycle Assessment (LCA) Reports for over 50 brands worldwide.
As regulations like the EU ESPR and Green Claims Directive reshape how products are sold, Zenero gives brands a single system of record to move from fragmented data to trusted, audit-grade impact disclosure.
Internship overview
Zenero is offering a 6-month Compliance Analyst internship for people who want hands-on experience building a privacy and security program from the ground up. You will look at how the company handles data today and help put us on a clear compliance path. The first work is GDPR and the data processing agreements we need with customers and vendors. From there, you will map what it would take to reach ISO 27001 and a SOC 2 Type 2 report.
This internship is designed to give you real analyst work from day one, close mentorship from the founding team, and a strong foundation for a future career in privacy, security, or compliance.
What you will do
- Review how Zenero collects, stores, shares, and deletes personal and customer data across the product, vendors, and internal tools
- Research and draft the pieces of a GDPR program: privacy notices, records of processing, lawful bases, retention, data subject requests, and a breach response process
- Draft data processing agreements (DPAs) for customers and vendors, and keep a current list of subprocessors
- Work with engineering on the product changes privacy and security require, including access control, data minimization, deletion, and international transfers
- Draft the policies, risk register, and operating routines that would later support an ISO 27001 information security management system
- Map the control work needed for SOC 2 Type 2, and recommend when Zenero would be ready to engage an auditor
- Help answer security and privacy questions from customers, and keep the working documents accurate as the program takes shape
- Track changes in privacy and security requirements that affect Zenero and the brands on the platform
What we are looking for
- A background or strong interest in law, privacy, cybersecurity, information security, or a related field. All backgrounds are welcome
- Available to commit to a 6-month internship
- Strong written English, with the ability to turn regulatory requirements into clear, practical documents
- Curious about GDPR, data processing agreements, and how companies prepare for ISO 27001 and SOC 2
- Comfortable asking questions, managing a few workstreams at once, and working with engineers and founders in a small team
- Coursework, a project, or a previous internship in privacy, security, or compliance is a plus
- No prior professional compliance experience is required
What Zenero offers
- Real, hands-on experience building a compliance program, from GDPR and data processing agreements through a roadmap for ISO 27001 and SOC 2 Type 2
- Exposure to a fast-growing industry at the intersection of technology, sustainability, and regulation
- A certificate of completion and a strong reference for future job applications
- The possibility of a full-time offer at the end of the internship for strong performers