Summer 2027 Cyber Risk Management Analyst Undergraduate Intern

About the Role

The Summer 2027 Cyber Risk Management Analyst Undergraduate Internship provides students with an opportunity to gain practical, hands-on experience identifying, assessing, and managing cybersecurity and information technology risks within a large, complex healthcare technology environment. This internship is designed to develop the next generation of cybersecurity professionals through direct exposure to cyber risk assessments, security controls, compliance frameworks, risk mitigation, secure solution design, and emerging technology risks.

Key Responsibilities

• Support risk assessments.
• Gather and analyze evidence.
• Conduct stakeholder interviews.
• Assist with risk scoring.
• Maintain risk registers.
• Monitor remediation activities.
• Support cybersecurity compliance documentation.
• Prepare presentations and recommendations for technical and business audiences.
• Provide entry-level professional services to day-to-day operating objectives.
• Participate in projects and programs appropriate to the needs of the assigned area.
• Participate in the planning and implementation of projects and initiatives.
• Conduct research and reporting, including recommendations or proposals for action.
• Undertake related studies or enrichment programs.
• Perform miscellaneous job-related duties as assigned.

Requirements & Tech Stack

• Knowledge of or academic exposure to the HITRUST CSF and NIST cybersecurity frameworks.
• Knowledge of or familiarity with NIST risk assessment methodologies.
• Exposure to industry cybersecurity and compliance frameworks, including HITRUST CSF, NIST, PCI-DSS, and ISO 27001.
• Exposure to secure software development lifecycle practices.
• Exposure to emerging areas such as secure AI adoption, AI model lifecycle security, data privacy, third-party AI and vendor risk, and automation within cyber risk management.
• Potential opportunities to use AI and automation to enhance risk analysis, control validation, reporting, and cybersecurity metrics.

Qualifications

• Full or part-time enrollment in an accredited college or university baccalaureate program.
• Currently pursuing a degree in Cybersecurity, Information Security, Computer Science, Information Technology, Information Systems, or a related technical discipline.
• Ability to communicate effectively while interacting directly with colleagues, clientele, and/or other internal or external constituencies in the planning of assignments and the resolution of day-to-day operational problems.
• Authorization to work in the U.S. independently.