Cybersecurity Internship Winter 2027 - Enterprise Risk Management

Description

The Consultant Development Program (Winter) is a paid training internship at the company, with anticipated dates of January 25 to April 2. Locations are Irvine, CA, and Fairfax, VA, in the DC area.

The program builds the technical and professional skills needed to move into a full-time Information Security Associate role. Interns work in the Enterprise Risk Management practice area, one of several areas that also include Compliance, Solutions Implementation and Threat Research.

The company combines cybersecurity, technology and compliance knowledge to help organizations build more secure digital environments. Its teams are small and collaborative, with a focus on continuous learning and sharing results.

Developing Consultants support client projects and are expected to build their skills through personal study and participation in the information security industry.

Responsibilities

• Help build and maintain Enterprise Risk Management programs for organizations in any industry.
• Carry out enterprise risk assessments and review potential exposure at a strategic level.
• Run vendor risk assessments for client organizations.
• Help develop governance frameworks and strategies for managing information security.
• Give general advice to organizations on information security risks when strategy, projects or infrastructure architecture change.
• Build the technical and business skills needed to do billable project work as early as possible.
• Learn industry certifications and what they are worth.
• Learn national and international standards and frameworks such as PCI-DSS, HIPAA and ISO 27001.
• Watch enterprise security solutions being implemented and help with internal and external penetration tests and social engineering projects.
• Draft technical execution plans that meet business requirements, and gather the requirements needed to complete them.
• Carry out plans that have already been designed.
• Write up execution procedures and explain the technologies involved.
• Support consultants on client engagements.

Requirements

• Have a technical mindset and understand how business and technology connect.
• Have basic familiarity with firewalls, routers, switches and DNS.
• Have basic skills in computer troubleshooting and server administration.
• Have basic knowledge of business planning and accounting.
• Knowledge of compliance frameworks is a plus.
• Manage several tasks at once and use your time well.
• Be dynamic, enthusiastic and strong at interpersonal communication.
• Write clearly, both for general audiences and for technical documentation.
• Have intermediate working knowledge of Excel and Word.
• Be a self-starter who learns and experiments independently.
• Hold a bachelor's degree from an accredited 4-year university or military equivalent, or be currently enrolled in one.
• IT, cybersecurity and information security certifications are a plus.
• Be eligible to work in the United States.

Conditions

Work onsite at the Fairfax, VA, or Irvine, CA, location.

Paid sick time off is provided.

The company is an equal-opportunity employer and includes an EEOC statement.

Benefits

• Paid sick time off.
• A lively work culture.
• Opportunities for career advancement.
• Successful completion may lead to a full-time entry-level Information Security Associate offer.