Summer Associate Internship

About the Role

The Security Controls Oversight, Risk & Evaluation (SCORE) team evaluates risk, validates control effectiveness, and delivers actionable insights to help Security leaders manage risk, meet regulatory expectations, and improve business outcomes. The team serves as a strategic business partner focused on advancing risk maturity, operational excellence, and informed decision-making across the Security organization through risk & control self-assessments (RCSA), controls testing, reporting, and emerging AI-enabled capabilities.

The Summer Associate Program is a 12-week internship program running from May 2027 to August 2027. Interns will work on impactful projects.

Requirements

• Currently pursuing a degree from an accredited college or university.
• Anticipated graduation date of December 2027 or later.

Potential Projects

• Risk & Control Process Modernization (AI and Automation): Evaluate current risk & control identification and testing activities to identify repetitive tasks benefiting from AI-assisted capabilities. Develop a roadmap of AI use cases.
• Reporting & Metrics Enhancement: Inventory SCORE reporting products and performance metrics to recommend a future-state reporting framework.
• Process Rationalization & Risk Mapping: Evaluate relationships between Security processes, risks, controls, standards, and regulatory requirements. Produce a consolidated mapping model.
• Cross-function Shadowing: Shadow staff and leaders from other Security, Governance, and Risk functions to gain visibility into enterprise efforts.

Key Responsibilities

• Support Risk & Control Identification and Assessment (RCIA) workshops and RCSA activities by documenting process information, risks, controls, and assessment outcomes.
• Assist with the review and analysis of process documentation, narratives, procedures, and process maps.
• Participate in security control testing activities by collecting, organizing, and reviewing evidence.
• Assist with documenting test procedures, test results, observations, and supporting workpapers.
• Perform data analysis and validation for risk assessments, control evaluations, and reporting.
• Support the maintenance of risk and control inventories within governance, risk, and compliance (GRC) systems.
• Assist with tracking action items, issues, remediation efforts, and testing milestones.
• Create executive-ready summaries, presentations, and status reporting materials.
• Research regulatory requirements, industry standards, and leading practices related to operational risk, information security, and controls management.
• Collaborate with risk managers, control testers, process owners, and business stakeholders.
• Participate in team meetings, project discussions, and training opportunities.
• Perform other duties as assigned.

Qualifications

• Currently enrolled in an accredited college or university pursuing a Bachelor's or Master's degree in: Business, Risk Management, Accounting, Information Security or other related fields.
• Strong analytical and problem-solving skills.
• Effective verbal and written communication skills.
• Strong organizational and time management skills with the ability to work independently or on a team.
• Proficiency with Microsoft Office products including Excel, Word, PowerPoint, and Teams.

Desired Qualifications

• Coursework or experience in audit, risk management, compliance, internal controls, or cybersecurity.
• Familiarity with risk assessment frameworks or control frameworks such as COSO, NIST, FFIEC, ISO 27001, or COBIT.
• Understanding of governance, risk and compliance (GRC) concepts.
• Experience using data analysis tools such as Excel, Power BI, SQL, or similar technologies.
• Interest in pursuing careers in internal audit, compliance, risk management, security governance, or cybersecurity.

Work Schedule

• Monday - Friday, 8:00 AM - 4:30 PM

Locations

• 820 Follin Lane, Vienna, VA 22180
• 5550 Heritage Oaks Drive, Pensacola, FL 32526
• 141 Security Drive, Winchester, VA 22602