IT Security & Compliance Internship
The IT Security and Compliance Intern will support the Information Security and Compliance Program with a focus on Vendor Risk Management. They will be responsible for assessing and reviewing our third-party vendors that support Eversource’s critical operations. This position will support the day to day operations and help to mature the practices of the Vendor Risk Management program.
The IT Security and Compliance Intern will support the Information Security and Compliance Program with a focus on Vendor Risk Management. They will be responsible for assessing and reviewing our third-party vendors that support Eversource’s critical operations. This position will support the day to day operations and help to mature the practices of the Vendor Risk Management program. Potential to take on other security/compliance related responsibilities.
Essential Functions:
Preferred Qualifications:
- Critical thinker with a focus on risk management and security
- Support day to day operations and evaluating Eversource’s vendors
- Experience exercising a technical mindset and mature judgment for problem-solving
- Ability to manage priorities in a fast paced and in a collaborative environment
- Produce metrics and reporting
- Self-motivated and eager to learn about new technologies
- Support additional projects
- Produce high quality oral and written work, presenting complex technical matters clearly and concisely with audiences ranging from peers to Sr. Management
Technical Knowledge/Skill/Education/Licenses/Certifications:
Technical Knowledge/Skill:
- Experience with one or more of the following is preferred: vendor risk management, related information security subject area. Must have an ability to develop an understanding of Security Standards and regulations (NERC-CIP, SOX, PCI).
Education:
- Pursuing a Bachelor’s/Master’s degree in Information Technology or a related technical field.
Experience:
- One (1) or more years of experience in the field of information technology or security is preferred.
Experience with one or more of the following:
- GRC Tools
Licenses & Certifications:
- Security+, CySA+, Certified Information Systems Security Professional (CISSP), or related CompTIE, GIAC, or EC-Council certifications