Compliance and Financial Risk Management Internship: What You Really Learn

Two neighbouring functions, two different logics

Compliance and risk management are often spoken of as a single block, yet the two functions do not start from the same question or use the same tools. Compliance asks: “Does our business follow the rules that apply to us?” Risk management asks: “What could cost us dearly, how likely is it, and how do we limit it?”

In a bank, an insurer or an asset manager, the two functions work side by side but remain distinct. Risks are broken down into credit, market, liquidity and operational risk. Compliance covers in particular the fight against money laundering and terrorist financing, international sanctions, customer protection, market integrity and data protection.

Before you apply, work out which of the two logics appeals to you. A badly written internship advert can mix the two; if so, ask whom you will report to and which files you will handle.

Where these internships take place

The host organisations are more numerous than you might think:

• retail, corporate and investment banks, which have large teams dedicated to compliance and risk;
• insurance companies and mutual insurers, which face solvency and internal control requirements;
• asset management companies and payment institutions;
• consulting and audit firms that support institutions through their regulatory projects;
• public supervisory and regulatory authorities, which also take on interns and apprentices;
• the legal and internal control departments of large non-financial companies.

The nature of the work differs. In a bank, you will handle files on customers, transactions and counterparties. In a consulting firm, you will take part in diagnostics and deliverables for several clients. In an authority, you will work on texts, sector analyses and supervision files, within a strict confidentiality framework.

Typical duties of a compliance intern

In compliance, the internship is often organised around evidence and traceability. The most common tasks are:

• checking onboarding files: the customer’s identity, beneficial owners, supporting documents, and whether the declared activity makes sense;
• first-level handling of alerts generated by screening tools, to tell a namesake from a case to be escalated;
• updating procedures and internal training material;
• keeping tracking tables: anomalies found, processing times, corrective actions;
• monitoring texts and the sanction decisions published by the authorities.

An alert is not an offence. It flags a situation that deserves an explanation. The intern documents what they find, passes it on through the proper chain and does not draw the conclusion in place of the authorised person. That discipline is part of what the internship teaches.

Typical duties of a risk management intern

On the risk side, the work is more quantitative and more cross-cutting. Depending on the team, you may be asked to:

1. feed a risk map by listing, for a given process, the feared events, their causes and the existing controls;
2. produce monitoring indicators, for example limit breaches or operational incidents, and explain how they have moved in a few sentences;
3. prepare reports for a risk committee, checking where the figures come from and whether they are consistent;
4. contribute to adverse scenario tests, following the assumptions set by the team;
5. follow the implementation of action plans decided after an incident or a control.

The tools are first of all the spreadsheet, then, depending on the case, databases, analysis languages or reporting solutions. Being comfortable with numbers helps, but the ability to describe a risk clearly to a non-specialist reader counts just as much.

Illustration: a day in a control team

Take a fictional example, with round figures. At the start of the week, a compliance team receives about sixty screening alerts on international transfers. The tutor gives the intern a batch of twenty alerts to examine.

For each one, the intern compares the name that came up with the information in the file: date of birth, country, activity. They note the elements that remove the doubt and those that keep it. Of the twenty alerts, fifteen are obvious namesakes, four need further information and one is passed to a senior analyst with a factual note of a few lines.

What matters is not the number but the method: reasoning that is written down, dated and can be reread by someone else. The day an internal or external controller asks why an alert was closed, the record stands as the answer. This habit of documenting is one of the things recruiters most appreciate afterwards.

Courses and profiles that open these doors

Profiles are varied: business law, banking and financial law, finance, economics, business schools, engineering schools for the quantitative functions, and applied mathematics for risk modelling. Some institutions offer specialist master’s degrees in compliance or banking risk control, often available as work-study.

The skills sought come up again and again from one advert to the next:

• rigour and an eye for detail;
• the ability to read a regulatory text and turn it into an operational instruction;
• a concise written style;
• integrity, which shows in an attitude more than in a qualification;
• the ability to read English, since many texts and exchanges are in that language.

An internship of this kind can be a way into internal audit, permanent control, regulatory consulting or the legal function.

Applications and interviews: what recruiters look at

An effective CV for these internships does not pile up mentions of “finance”. It shows specific pieces of work: a dissertation on a regulatory topic, a case study on anti-money-laundering, a mapping project in a voluntary organisation. The recruiter is looking for a student who can work within a structured framework.

In interviews, the questions are often situational. For example: you notice an inconsistency in a file while a manager is pressing you to close it; what do you do? The right answer is neither to give in nor to object loudly, but to document the discrepancy, tell your tutor and follow the escalation procedure.

Also prepare some thoughts on a current development in financial regulation and on why you are drawn to control rather than to commercial roles. Applications are submitted on institutions’ careers sites, through schools’ careers services and to the authorities, which publish their own offers.

Internship conditions, vigilance and mistakes to avoid

In France, an internship lasts at most six months and carries a payment (gratification) as soon as it goes beyond two months of attendance. Under the rules applying in 2026, the legal minimum is 4.50 euros per hour; large financial institutions often offer more. The amount is stated in the internship agreement, which also names the tutor and the assignments.

Control functions demand strict discretion. You will have access to information on customers, transactions and sometimes internal investigations. Do not discuss anything outside the professional setting, including with those close to you, and apply the document classification rules.

The most frequent mistakes are these:

• concluding too quickly that a situation is fraudulent when it simply remains to be explained;
• closing an alert without a written record of the reasoning;
• copying data into an unauthorised tool to save time;
• hesitating to report your own error, when a fault declared early is more easily put right.

Finally, ask what training you will receive at the start, because mastery of the tools and procedures determines how independent you can be.