IT GRC

Job Overview

The IT GRC Intern will join the IT Governance, Risk, and Compliance Team in support of all GRC processes. This includes third-party risk management, security controls and risk analysis, audit support, security awareness and anti-phishing campaign management, data privacy, and vulnerability management. Success in this role will require a high competency in business communication with peers and business partners, data entry and analysis and working with information technology and security control software. This internship will offer a great opportunity to gain an understanding of the dynamic and vast field of Information Security.

Primary Duties and Responsibilities

• Communicate with peers and management to improve understanding of complex security and compliance requirements.
• Quickly gain an understanding of the function and configuration of new IS systems and applications
• Identify gaps in security and/or compliance requirements and communicate as appropriate
• Collect, evaluate and analyze documentation requested by third parties for audit or compliance assessments.
• understand stakeholders roles in IT processes
• schedule and attend meetings to further GRCs understanding of IT controls
• effectively communicate identified risks and recommended remediation, and track progres
• Conduct testing on information technology, security, and ITGC controls.
• Track and document complex, multi-team projects using Office 365 tools including Excel, AuditBoard, OneTrust, Trello, Jira, Service Now and more.
• Add to the GRC Knowledge Base
• Advise IT teams on security initiatives
• Follow up on remediation efforts with functional teams and update the risk register
• Review IT and Security configurations and implementations, assess these for compliance with various compliance frameworks. Compile analysis and reports using Excel, Word, PDFs or other applications for distribution.
• Assist with the security awareness campaigns by drafting and distributing security awareness and team building communications, tracking training completion status and managing simulated phishing campaign

Education

bachelors degree or higher in accounting, Business Administration, Information Technology or other related field

Work Experience

One or more years experience working in an audit, compliance, business analytics or IT Governance role preferred.

Knowledge, Skills, and Competencies

Required:

• Proficiency with Business writing and communication
• Proficiency with Microsoft Office suite Excel and Outlook in particular
• Ability to maintain confidentiality and appropriately handle sensitive information
• Experience developing presentations, reporting, and analyzing
• Ability to maintain confidentiality and appropriately handle sensitive information
• Self-sufficient with emphasis on attention to detail
• Ability to grasp context, draw parallels and conclusions, share thoughts and findings to solve complex issues within a team environment

Preferred:

• Knowledge of cybersecurity frameworks, such as NIST and ISO
• Familiarity with vulnerability management and security scanning processes
• Working knowledge of AuditBoard, OneTrust, Service Now, SAP applications
• Must be authorized to work in the US for any employer