Cybersecurity Internship Winter 2027 - International Organization for Standardization (ISO)

Description

This is a winter 2027 internship in the Consultant Development Program at the company, a cybersecurity consultancy. The cohort is expected to run from January 25 to April 2, based in Irvine, CA, or Fairfax, VA, in the DC area.

The program is paid and combines training with client work, aimed at building the technical and professional skills needed to join the company as a full-time Information Security Associate. Interns work as Developing Consultants on the client-facing team, supporting project delivery in areas such as Enterprise Risk, Compliance, Solutions Implementation, and Threat Research, and keep building skills through self-study and industry involvement.

Your focus in this practice area is ISO standards. The team assesses clients' security posture against the ISO 27000 series, helps build ISO 27001 information security management systems, and helps align systems with ISO 27018 and 27701 for protecting personally identifiable information in cloud services, as well as ISO 22301 business continuity systems.

Responsibilities

• Sit in on interviews with client subject matter experts to gather data.
• Help write templates and procedures for ISO compliance and risk work.
• Help draft reports and prepare client deliverables.
• Study national and international standards, frameworks, and laws, including the ISO 27000 series (such as 27001, 27017, 27018, and 27701), ISO 22301, ISO 42001, and other international standards.
• Build the technical and business skills needed to handle billable project work as early as you can.
• Learn which industry certifications exist and what they offer.
• Study PCI-DSS, HIPAA, and ISO 27001.
• Watch enterprise security solution implementations and take part in internal and external penetration tests and social engineering projects.
• Draft technical execution plans that meet business goals, and collect the requirements those plans depend on.
• Carry out plans that have already been designed.
• Write up execution procedures and explain the technologies involved.
• Assist consultants on client engagements.

Requirements

• Be a technologist at heart who also understands how business and technology connect.
• Have a basic grasp of firewalls, routers, switches, and DNS.
• Have basic experience with computer troubleshooting and server administration.
• Have basic knowledge of business planning and accounting.
• Knowledge of compliance frameworks is a plus.
• Manage several tasks and your time well.
• Be dynamic, enthusiastic, and strong at interpersonal communication.
• Write clearly, both for general audiences and for technical documentation.
• Have intermediate working knowledge of Excel and Word.
• Be a self-starter who enjoys experimenting and learning independently.
• Be enrolled at, or hold a bachelor's degree from, an accredited 4-year university, or the military equivalent.
• IT, cybersecurity, and information security certifications are a plus.
• You must be eligible to work in the United States.
• You must work onsite at the Fairfax, VA, or Irvine, CA, location.

Conditions

Work onsite in Fairfax, VA, or Irvine, CA.

The cohort is expected to run from January 25 to April 2.

Paid sick time off is provided.

Equal-opportunity statement applies.

Benefits

• Paid sick time off.
• A lively work culture.
• Opportunities for career advancement.
• Successful completion may lead to a full-time entry-level Information Security Associate offer.