About the role

IT Security Vulnerability, Risk, and Compliance Analyst intern at the Church of Jesus Christ of Latter-day Saints. Supporting IT infrastructure security and compliance for global audience.

Responsibilities

Get experience supporting systems and delivering services to users at Church headquarters and millions of users throughout the world.
Help document and implement controls and practices that meet the Church’s defined policies and standards for risk and compliance.
Assist in additional discovery and investigation under the direction of incident responders.
Review logs and reports to identify patterns for signs of irregularities and abnormal patterns to be escalated for further investigation.
Assist in the investigation and analysis of technology audit recommendations.
Assist in the clarification and documentation of identified problems for future recognition and remediation.
Assess solution and enterprise level risks to the Church’s IT infrastructure and make recommendations for improving IT security
Supporting and enabling the implementation of security programs and controls, advising on the risk implications of the architecture and design decisions and assisting with the design and validation of risk reduction efforts.
Help discover applications requiring vulnerability scans throughout the environment.
Assist in setting up vulnerability scans of applications used by the Church.
Assist in validation of results reported by vulnerability scans to eliminate false positive events.
Review and report to application engineers the vulnerabilities found.
Work with state-of-the art tools to help develop enterprise solutions
Mentor with highly experienced IT professionals

You should be currently enrolled or within one year of your graduation date from an accredited college or university in Cyber Security or Computer Science
Internships are for current temple worthy members of the Church of Jesus Christ of Latter-day Saints.
General knowledge of current information security practices, trends and technologies, OS fundamentals, network fundamentals, Cloud security, end-point security, privacy, business continuity, GRC, security research, analytical skills, and other related areas.
Technology background is desired.
Knowledge of security risk and/or compliance assessment preferred
Knowledge of application vulnerability assessment preferred
Good interpersonal and collaborative skills with ability to work effectively as part of a team
Professional written and oral communication skills
Detail-oriented with the proven ability to follow instructions
Works well with others, especially those in complementary roles
Ability to monitor and analyze operational reports and logs looking for irregularities and abnormal patterns
Confidence in conducting presentations of recommendations to engineers, managers and executives.
Basic knowledge of IT organization patterns
Demonstrated proficiency with MS Office, Excel, Word and PowerPoint

Flexible work schedules that include remote and hybrid options for certain positions
On-site fitness centers
Interns do get the option of enrolling in a high deductible medical plan.