The European Space Agency (ESA) is offering an internship in the Cyber Internal Audit Section of its Security Office at ESTEC in Noordwijk, Netherlands, focused on cybersecurity assurance, AI cybersecurity frameworks and audit standards. Applications close on 30 November 2026 at 23:59 CET/CEST. At Youth Works Hub, we reviewed the full vacancy and set out every task, requirement and eligibility rule below.
The Internship at a Glance
The internship sits within ESA's Resources and Services Directorate. These are the formal details of the vacancy:
🆔 Job Requisition ID: 21001
🎓 Type of appointment: Intern
🏛️ Directorate: Resources and Services
📍 Workplace: Noordwijk, NL
🗺️ Location: ESTEC, Noordwijk, Netherlands
📣 Publication method: External Only
📅 Closing date: 30 November 2026, 23:59 CET/CEST
Where You Will Be Based: ESTEC in Noordwijk
The internship is located at ESTEC in Noordwijk, Netherlands. The vacancy lists Noordwijk, NL as the workplace for the role within the Resources and Services Directorate.
Our Team and Mission: The ESA Security Office
In the ESA Security Office, the Cybersecurity Industrial Audits play a major role in the security assurance process, contributing to the cybersecurity risk management associated to the organisation and infrastructure that the directorates deliver to their customers. The Cybersecurity Industrial Audits are part of the ESA Security Policy.
Candidates interested are encouraged to visit the ESA website, listed in the Links section below.
────────────────────────────────────────
🌍 All opportunities in Netherlands →
────────────────────────────────────────
Your Tasks as a Cyber Internal Audit Intern
As an intern, you will have the following tasks:
🛰️ Contributing to the security assurance process and cybersecurity risk management for ESA's programmes under the European Space Security Policy
🤖 Researching and analysing emerging Artificial Intelligence (AI) cybersecurity frameworks (such as FAICP, ISO/IEC 42001:2023, and NIST AI RMF)
🧩 Contributing to the analysis and design of integration solutions with the current Cyber Internal Audit Framework used across the supply chain of the ESA programs
Learning Areas During the Internship
The vacancy lists the following learning areas:
📋 ESA Cyber Internal Audit Framework
🏗️ Cybersecurity Frameworks such as NIST, FACIP, SSDF, BSA or Secure Control Framework
📏 Cybersecurity International Standards such as ISO27K series, ISO22301 or ISO31K
📖 Cybersecurity Guides and Guidelines such as OWASP, the CMMC or the Cloud Control Matrix
🔎 Auditing standards and guidelines from ISACA or the IIA
Behavioural Competencies
The vacancy lists the following ESA core behavioural competencies:
🏁 Result Orientation
⚙️ Operational Efficiency
🤝 Fostering Cooperation
💬 Relationship Management
🔄 Continuous Improvement
🔭 Forward Thinking
For more information, the vacancy refers to the ESA Core Behavioural Competencies guidebook.
Who Can Apply: Education
You must be a university student, preferably in your final or second-to-last year of university course at Master's level. In addition, you must be able to prove that you will be enrolled at your university for the entire duration of the internship.
Language Requirements
The working languages of the Agency are English and French. A good knowledge of one of these is required. Knowledge of another ESA Member State language is an asset.
Additional Requirements and Assets
The vacancy lists the following additional requirements:
🎤 During the interview, your motivation for applying to this role will be explored
🔐 Basic knowledge or training in information security and auditing aspects will be considered as an asset
💻 Knowledge of software development is considered as an asset
Eligible Nationalities
Applications are only considered from nationals of one of the following States:
🌍 Austria, Belgium, Cyprus, Czechia, Denmark, Estonia, Finland, France, Germany, Greece, Hungary, Ireland, Italy, Latvia, Lithuania, Luxembourg, the Netherlands, Norway, Poland, Portugal, Romania, Slovakia, Slovenia, Spain, Sweden, Switzerland, and the United Kingdom.
Applicants from Canada as a Cooperating State can apply as well as those from Bulgaria, Croatia and Malta as European Cooperating States (ECS).
Selection Tests
During the recruitment process, the Agency may request applicants to undergo selection tests.
Duration, Start and Application Limit
According to ESA's announcement of its 2027 student internships, an internship lasts between 3 and 6 months and starts from February 2027. The exact start date is agreed with the ESA tutor.
One candidate can apply for a maximum of 2 vacancies.
Diversity, Equity and Inclusiveness
ESA is an equal opportunity employer, committed to achieving diversity within the workforce and creating an inclusive working environment. It welcomes applications from all qualified candidates irrespective of gender, sexual orientation, ethnicity, religious beliefs, age, disability or other characteristics.
At the Agency, diversity is valued and people with disabilities are welcome. Whenever possible, ESA seeks to accommodate individuals with disabilities by providing the necessary support at the workplace. The Human Resources Department can also provide assistance during the recruitment process, and you can contact ESA by email using the address in the Links section below.
Important Information
The information published on ESA's careers website regarding internship conditions is correct at the time of publication. It is not intended to be exhaustive and may not address all questions you would have. The vacancy does not state a stipend or allowance. You can find more opportunities like this in the internships and traineeships section of Youth Works Hub.
Frequently Asked Questions
Where is the Cyber Internal Audit internship based?
The internship is based at ESTEC in Noordwijk, Netherlands, within ESA's Resources and Services Directorate. The vacancy lists Noordwijk, NL as the workplace.
What is the deadline to apply?
The closing date is 30 November 2026 at 23:59 CET/CEST. Applications are submitted through the ESA careers website.
What will I do as a Cyber Internal Audit intern?
You will contribute to the security assurance process and cybersecurity risk management for ESA's programmes under the European Space Security Policy. You will also research and analyse emerging AI cybersecurity frameworks such as FAICP, ISO/IEC 42001:2023 and NIST AI RMF, and contribute to the analysis and design of integration solutions with the current Cyber Internal Audit Framework used across the supply chain of the ESA programs.
What will I learn during the internship?
The learning areas are the ESA Cyber Internal Audit Framework, cybersecurity frameworks such as NIST, FACIP, SSDF, BSA or Secure Control Framework, and international standards such as the ISO27K series, ISO22301 or ISO31K. They also include guides such as OWASP, the CMMC or the Cloud Control Matrix, and auditing standards and guidelines from ISACA or the IIA.
Who can apply for this internship?
You must be a university student, preferably in your final or second-to-last year of university course at Master's level. You must also be able to prove that you will be enrolled at your university for the entire duration of the internship.
Which nationalities are eligible?
Applications are only considered from nationals of ESA's listed States, which include the Netherlands, Germany, France, Italy, Spain, the United Kingdom and 21 others named in the vacancy. Applicants from Canada as a Cooperating State, and from Bulgaria, Croatia and Malta as European Cooperating States (ECS), can apply as well.
Which languages do I need?
The working languages of the Agency are English and French, and a good knowledge of one of them is required. Knowledge of another ESA Member State language is an asset.
Do I need a background in information security?
Basic knowledge or training in information security and auditing aspects will be considered as an asset, as will knowledge of software development. Your motivation for applying to the role will also be explored during the interview.
How long does the internship last and when does it start?
According to ESA's 2027 student internships announcement, an internship lasts between 3 and 6 months and starts from February 2027. The exact start date is agreed with the ESA tutor.
How many ESA internship vacancies can I apply for?
One candidate can apply for a maximum of 2 vacancies, according to ESA's announcement of its 2027 student internships.
Is the internship paid?
The vacancy does not state a stipend or allowance.
What happens during the selection process?
Your motivation for applying to the role will be explored during the interview. ESA may also ask applicants to undergo selection tests.
Deadline
⏳ 30 November 2026
Links
🔗 Full vacancy and application (Apply now): https://jobs.esa.int/job/Noordwijk-Intern-in-the-ESA-Security-Office-Cyber-Internal-Audit-Section/1452793533/
📘 ESA Student Internships 2027 announcement: https://www.esa.int/About_Us/Careers_at_ESA/ESA_Student_Internships_2027_are_now_open
🌐 ESA website: http://www.esa.int
📧 ESA student internships contact (diversity and accessibility questions): ESA.Student.Internships@esa.int
