Cyber Strategy & Architecture Internship: Post-Quantum Cryptography

Internship summary

NVISO is a pure-play cyber security consulting firm: our team is composed of security professionals who each have their specific field of expertise, ranging from Information Security Governance, Risk & Compliance to Incident Response, Penetration Testing, CSIRT/SOC, Software Security, and Training & Awareness. This fantastic blend of skills enables us to help organizations prevent, detect, and respond to complex security challenges.

As a Cybersecurity PQC Intern, you will develop a practical PQC control framework, EU regulatory-overview and optionally, a PQC related tabletop exercise. The objective is to translate PQC guidance, standards, and industry practices into an evidence-based framework that enables organizations to assess, govern, priorities, and safely execute their transition to quantum-resistant cryptography. The framework will help NVISO consultants deliver consistent PQC readiness assessments and actionable migration roadmaps.

The study will define controls across governance and strategy, cryptographic asset inventory, PQC risk assessment, architecture and crypto agility, PKI and certificate lifecycle management, secure engineering and testing, third-party readiness, operational deployment, and skills development.

Note: as this is a very evolving topic, the content of this internship may be adapted to the current needs and maturity of the quantum landscape.

Tasks

• Research PQC migration, cryptographic governance, and crypto-agility guidance.

• Analyze how relevant frameworks, regulations and guidance can be mapped to a practical, consulting-ready PQC and crypto-agility control framework.

• Develop an EU regulatory overview of PQC requirements.

• Define a control catalogue with clear control objectives, control statements, implementation guidance, maturity indicators, and risk implications. This should cover domains like governance, crypto-asset inventory, risk prioritization, architecture, PKI, secure engineering, suppliers, operations, and awareness.

• Define a Crypto Agility maturity model that assesses an organization’s ability to discover, change, test, deploy, and monitor cryptography at scale.

• Optionally: Develop a PQC tabletop exercise based on the announcement of a cryptographically relevant quantum computer.

Requirements

• Currently pursuing a degree in Cybersecurity, Cryptography, Computer Science, Engineering, Governance, or a related field.

• Excellent written communication skills in English and Dutch.

• Basic knowledge of cybersecurity, cryptography, risk management, or security frameworks.

• Strong analytical and synthesis skills, with attention to detail and consistency.

• Curious, methodical, and comfortable working with documentation and regulatory content.

Output of the internship

By the end of the internship, the student will have:

• Acquired deep understanding of the cybersecurity risk related to quantum computers.

• Acquired deep understanding of remediation activities for Post-Quantum Cryptography.

• Produced a practical PQC and crypto-agility control framework for assessing client readiness.

• Developed a PQC-related tabletop exercise (optional).

Practical Information

• Location: Brussels, Belgium

• Working model: Hybrid

• Start date: From February 2027

• Duration: Minimum 3 months

• Unpaid internship

• Eligibility: You must be eligible to work in Belgium and meet the eligibility conditions applicable to this assignment.

• University agreement: This internship must be part of your academic programme and covered by an internship agreement with your university.

• Support: You will be supported by a dedicated NVISO mentor throughout your internship.

• Future opportunities: A successful internship may lead to further opportunities at NVISO after graduation, depending on mutual fit and available positions.

Interested? Send us your application!!