Summer Associate Internship (Technical Risk Analyst - Security)

The Security Controls Oversight, Risk & Evaluation (SCORE) team is responsible for evaluating risk, validating control effectiveness, and delivering actionable insights that help Security leaders manage risk, meet regulatory expectations, and improve business outcomes.

Through risk & control self assessments (RCSA), controls testing, reporting, and emerging AI-enabled capabilities, the team serves as a strategic business partner focused on advancing risk maturity, operational excellence, and informed decision-making across the Security organization.

The Summer Associate Program is a 12-week internship program beginning in May 2027 and ending in August 2027.

Students will work on impactful projects and meaningful work during their internship.

To qualify for this position, applicants must be currently pursuing a degree from an accredited college or university and have an anticipated graduation date of December 2027 or later.

• Risk & Control Process Modernization (AI and Automation) - Evaluate current risk & control identification and controls testing activities to identify repetitive, time-intensive tasks that could benefit from AI-assisted capabilities. Develop a prioritized roadmap of AI use cases focused on improving productivity, quality, consistency, and analyst capacity.
• Reporting & Metrics Enhancement - Inventory SCORE reporting products and performance metrics to determine which measures effectively support decision-making and which create unnecessary effort. Recommend a future-state reporting framework that improves data quality, transparency, automation, and leadership visibility.
• Process Rationalization & Risk Mapping - Evaluate relationships between Security processes, risks, controls, standards, and regulatory requirements to improve traceability and reduce complexity. Produce a consolidated mapping model that supports process rationalization, risk coverage analysis, and future governance activities.
• Cross-function Shadowing - Shadow staff and leaders from other Security, Governance, and Risk functions to gain visibility into cross-team enterprise efforts such as issues management, incident management, and leadership reporting.