Privacy Engineer Intern - Lean Six Sigma

Teamwork makes the stream work. Roku is changing how the world watches TV Roku is the #1 TV streaming platform in the U.S., Canada, and Mexico, and we've set our sights on powering every television in the world. Roku pioneered streaming to the TV. Our mission is to be the TV streaming platform that connects the entire TV ecosystem. We connect consumers to the content they love, enable content publishers to build and monetize large audiences, and provide advertisers unique capabilities to engage consumers. From your first day at Roku, you'll make a valuable - and valued - contribution. We're a fast-growing public company where no one is a bystander. We offer you the opportunity to delight millions of TV streamers around the world while gaining meaningful experience across a variety of disciplines. About this area Roku’s Trust team is responsible for protecting the company’s products, infrastructure, and data from security threats. The team works across Governance, Risk Compliance (GRC) and Security Operations (SecOps) to ensure security policies are followed, risks are managed, and threats are detected and mitigated. Through a combination of monitoring, automation, and compliance frameworks, the team helps secure Roku’s global platform and maintain strong security standards across the organisation. About the role We are looking for a motivated Cyber Security Intern to join our Trust team and gain hands-on experience across Security Operations (SecOps) and Governance, Risk Compliance (GRC). We offer a paid 12-week internship, starting in Summer 2026. This role will have a 60/40 split between time spent in GRC Sec Ops. You will work alongside experienced risk specialists and security engineers to monitor, structure and standardise documentation within GRC . As well as monitor systems, investigate security events, and support the implementation of security controls and governance frameworks. This internship offers exposure to a real understanding of the associated risks within technology and its systems, platforms and tools. Alongside, real-world cybersecurity challenges while developing practical technical, analytical, and risk management skills. What you’ll be doing A Privacy Engineer Intern is needed to support the following functions within Trust: Governance Risk and Compliance (GRC) 60% Allocation of time The intern’s work is to help maintain compliance with security policies and regulations by reviewing Roku’s current internal repositories Support the security governance documentation across the intranet ensuring it is accurate and up to date via the maintenance of cohesive and organised libraries Support the implementation of wider compliance policies and guidelines across Roku by aligning to a standardised process Assist with security awareness training programs assisting the current SME Contribute to compliance research and reporting Security Operations (SecOps), which monitors activity for threats using SIEM tools, and helps highlight improvements to security controls. 40% Allocation of time The Intern’s work on vulnerability assessments, malware analysis, and script development (e.g., Python) to automate security tasks while assisting senior engineers. Support Vulnerability management efforts remediation across Corporate endpoints Cloud systems (Azure, AWS, GCP etc...) Assist in Threat Hunting Investigations by querying systems logs ( XQL, KQL, SQL etc...) Support Security Compliance Audit checks Highlight Policy Gaps using technical assessments  evidence working alongside GRC other functions. What you’ll be doing You will be tasked at the end of the 12 week program with creating an ISM deliverable to include an assessment of the internal documentation which is aligned to industry specific standards such as ISO and NIST. The ISM will clearly set out the business justification and rationale for the internal re-organisation of the policies, process and procedures w ... (truncated, view full listing at source)