Security Governance, Risk, and Compliance Intern (Remote)

JOB SUMMARY:

Do you have a dynamic personality? Are you passionate about cybersecurity and want to support a wide variety of opportunities and initiatives related to security consulting? Do you have excellent active listening skills and can apply critical thinking quickly and effectively? If so, you may be a great fit for the Security Governance, Risk, and Compliance (GRC) team!

As part of the Trace3xperience Program, the Governance, Risk, and Compliance Tracer (Intern) will support all aspects of the GRC team and market offerings. Activities will include learning to align information security with client business goals using a risk-based approach in the core areas of IT security, including Identity and Access Management, Data Security, Applications Security, Network Security and Engineering, Security Program Strategy, and Operations. You will also attend client and sales calls to shadow and learn about Trace3 consulting and delivery.

Tracers in this program will receive accelerated professional development, exposure to all technical functions of an IT consulting organization, world-class mentoring, and unique networking opportunities across the organization.

WHAT YOU CAN EXPECT TO LEARN AND DO:

• You will learn:
  • About security consulting and how to approach the market
  • How the role of Governance, Risk, and Compliance is integrated within a security organization
  • How to implement industry security frameworks (e.g., NIST, CSF) and translate these into tailored, prescriptive control environments to guide security program investments in people, processes, and technology
  • How to develop security program strategies and recommendations
  • How to develop deliverables and presentations for an organization’s leadership
• You will:
  • Attend discovery, strategy, or sales/scoping calls
  • Assist with the development of client deliverables (e.g., risk assessments, policy and procedures, or technology roadmaps)
  • Support the build or enhancements of GRC offerings
  • And more activities, as identified, defined, and prioritized by the GRC team
    
    

ELIGIBILITY AND PREFERRED SKILLS:

• Enrollment in the Junior or Senior year of an undergraduate program or in a masters program, at an accredited college or university
• Candidates should be pursuing a field of study applicable to information technology, cybersecurity, or computer security with a focus or interest in assurance/governance / risk/compliance
• Cumulative grade point average (GPA) of 2.5 or better; People and Organizational Health may require a copy of the applicant’s transcript
• Academic or professional/internship experience working in a professional setting is a plus but not required
• Ability to work independently on assigned tasks and accepts direction on given assignments
• Self-motivated individuals with a customer mindset and desire to help people
• Enthusiasm for technical problem solving with attention to detail and strong communication skills
• Ability to learn and research in a dynamic and engaging environment
• Availability to work 40 hours per week throughout the internship