IT Governance, Risk & Compliance Intern

About the Role

This is an on-site position in Coralville, Iowa, reporting to the Sr. IT GRC Manager and part of the IDT IT-GRC Department.

Key Responsibilities

• Research and document new standards and regulations applicable to various audit areas.
• Utilize continuous improvement or kaizen tools / framework to identify areas of improvement and implement changes.
• Assist in leading the Change Management Program and CAB to ensure changes do not create business-impacting events/incidents.
• Support IT GRC Analysts in the Third Party Risk Analysis process and provide timely responses to customers.
• Assist in Documentation and Policy Maintenance to ensure documents are up-to-date and aligned.
• Maintain timely Termination and Transfer Responsibilities by adjusting system access.
• Track, document, and respond to Customer Questionnaires / Assessments.
• Provide support for internal and external Audits, retrieving and organizing evidence.
• Facilitate remediation findings to closure and sustainment.
• Create and maintain IT GRC Sharepoint Site and documentation.

Requirements & Tech Stack

• Sharepoint (for IT GRC Site creation and maintenance)
• Change Management Program
• CAB (Change Advisory Board)
• Third Party Risk Analysis
• Continuous Improvement / Kaizen Tools / Framework

Qualifications

• Bachelor’s Degree or in progress of Bachelor’s Degree.
• Ability to research and document standards and regulations.
• Ability to utilize continuous improvement or kaizen tools / framework.
• Ability to assist in leading the Change Management Program and CAB.
• Ability to support IT GRC Analysts in Third Party Risk Analysis.
• Ability to provide timely responses to customers.
• Ability to assist in Documentation and Policy Maintenance.
• Ability to maintain timely Termination and Transfer Responsibilities.
• Ability to track, document, and respond to Customer Questionnaires / Assessments.
• Ability to provide support for internal and external Audits.
• Ability to retrieve and organize evidence for critical assessments.
• Ability to facilitate remediation findings to closure and sustainment.
• Ability to create and maintain IT GRC Sharepoint Site.

Travel required, up to 10% of the time.

Preferred Experience

• Creating / developing programs to bridge or eliminate gaps within the organization.
• Utilizing continuous improvement methods and frameworks to identify areas of improvement and create opportunities for efficiency in GRC.
• Assisting in / supporting Third-Party Risk Management activities related to risk assessments and compliance-gap analysis.