Risk Management Intern

About the role

This internship offers hands‑on experience in information security governance, risk management, and compliance. You will work closely with senior analysts to support the company’s security program and gain exposure to industry‑standard frameworks.

Key responsibilities

• Assist in reviewing, formatting, and updating information security policies, standards, and procedures.
• Support the rollout of the Security Awareness Training program, including newsletter design, training tracking, and phishing simulations.
• Prepare slide decks and reports on security metrics for management.
• Shadow senior analysts during IT and cybersecurity risk assessments.
• Review basic vendor security questionnaires and organize third‑party documentation.
• Maintain the Risk Register by logging new risks and tracking remediation tasks.
• Gather and organize evidence for audits such as SOC 2, ISO 27001, and HIPAA.
• Track and document remediation of audit findings and manage a central repository of compliance documentation.

Required profile

• Currently enrolled in a Bachelor’s or Master’s program in Cybersecurity, IT, MIS, Business, Law, or a related field (preferably rising junior, senior, or master’s student).
• Basic understanding of general IT concepts and foundational cybersecurity principles.

Required skills

• Familiarity with NIST, ISO 27001, and SOC 2 frameworks.
• Experience or exposure to GRC (Governance, Risk, and Compliance) tools.