Cyber Strategy & Architecture Internship Post-Quantum Cryptography

NVISO is a pure-play cyber security consulting firm: our team is composed of security professionals who each have their specific field of expertise ranging from Information Security Governance Risk & Compliance to Incident Response Penetration Testing CSIRT/SOC Software Security and Training & Awareness. This fantastic blend of skills enables us to help organizations prevent detect and respond to complex security challenges.

As a Cybersecurity PQC Intern you will develop a practical PQC control framework EU regulatory-overview and optionally a PQC related tabletop exercise. The objective is to translate PQC guidance standards and industry practices into an evidence-based framework that enables organizations to assess govern priorities and safely execute their transition to quantum-resistant cryptography. The framework will help NVISO consultants deliver consistent PQC readiness assessments and actionable migration roadmaps.

The study will define controls across governance and strategy cryptographic asset inventory PQC risk assessment architecture and crypto agility PKI and certificate lifecycle management secure engineering and testing third-party readiness operational deployment and skills development.

Note: as this is a very evolving topic the content of this internship may be adapted to the current needs and maturity of the quantum landscape.

• Research PQC migration cryptographic governance and crypto-agility guidance.

• Analyze how relevant frameworks regulations and guidance can be mapped to a practical consulting-ready PQC and crypto-agility control framework.

• Develop an EU regulatory overview of PQC requirements.

• Define a control catalogue with clear control objectives control statements implementation guidance maturity indicators and risk implications. This should cover domains like governance crypto-asset inventory risk prioritization architecture PKI secure engineering suppliers operations and awareness.

• Define a Crypto Agility maturity model that assesses an organizations ability to discover change test deploy and monitor cryptography at scale.

• Optionally: Develop a PQC tabletop exercise based on the announcement of a cryptographically relevant quantum computer.

• Currently pursuing a degree in Cybersecurity Cryptography Computer Science Engineering Governance or a related field.

• Excellent written communication skills in English and Dutch.

• Basic knowledge of cybersecurity cryptography risk management or security frameworks.

• Strong analytical and synthesis skills with attention to detail and consistency.

• Curious methodical and comfortable working with documentation and regulatory content.

By the end of the internship the student will have:

• Acquired deep understanding of the cybersecurity risk related to quantum computers.

• Acquired deep understanding of remediation activities for Post-Quantum Cryptography.

• Produced a practical PQC and crypto-agility control framework for assessing client readiness.

• Developed a PQC-related tabletop exercise (optional).

• Location: Brussels Belgium

• Working model: Hybrid

• Start date: From February 2027

• Duration: Minimum 3 months

• Unpaid internship

• Eligibility: You must be eligible to work in Belgium and meet the eligibility conditions applicable to this assignment.

• University agreement: This internship must be part of your academic programme and covered by an internship agreement with your university.

• Support: You will be supported by a dedicated NVISO mentor throughout your internship.

• Future opportunities: A successful internship may lead to further opportunities at NVISO after graduation depending on mutual fit and available positions.