CDS Intern - Compliance Analyst

Costco IT•Issaquah, WA

7d•$21 - $33•Onsite

About The Position

Costco Digital Services is offering a paid, 12-week internship during 2027 for students currently enrolled in an IT or related undergraduate or graduate program. The program runs from mid-June to early September and is located in Issaquah, Washington. Interns work in specific areas of Costco’s Information Systems Division, attend presentations by IT and Company executive management, and create and present a summary of their experience to management and peers at the end of the internship. Interns are responsible for their own travel and accommodation expenses; housing is not provided. Out-of-state work is not allowed, and interns are required to work in the office five days a week and adhere to the CDS. The International Security Intern supports efforts to assess and strengthen security maturity across international operations. The role provides hands-on experience with global information security, maturity assessments, risk analysis, and collaboration with international technology and business teams. The intern helps maintain security maturity baselines, analyze assessment results, identify common gaps and regional differences, organize assessment evidence, and develop reporting to support security decisions. The position also supports the POKER assessment methodology and contributes to repeatable processes that improve visibility into the organization’s international security posture. The intern collaborates with Information Security leadership and international technology teams to understand regional operating environments, business considerations, and security challenges. The role emphasizes analytical thinking, effective communication, and translating assessment information into insights that support global security strategy. The internship is classified as hourly temporary employment for its duration. Interns may be asked to interview for a level 1 position; if not selected for a regular position, the internship ends within a maximum of twelve weeks.

Requirements

Currently enrolled in an IT or related undergraduate or graduate program at a community college, college, or university.
Currently maintaining a GPA of 3.0 or higher.
Excellent attention to detail around data, analytics, and risk assessments.
Understanding of technical data flows as described by the business.
Excellent verbal and written communication skills.
Good organizational, time-management, and project-management skills, including the ability to prioritize and stay organized.
Ability to work independently and in a team environment, follow instructions, and complete assignments on time.
Must work in the office five days a week in Issaquah, Washington; out-of-state work is not allowed.
Required application documents: cover letter and resume.

Nice To Haves

Certification in a compliance, privacy, or cybersecurity area.
Proficiency in Google Workspace applications, including Sheets, Docs, Slides, and Gmail.

Responsibilities

Support international security maturity assessments using the organization’s POKER assessment methodology.
Assist with documenting and analyzing security maturity baselines across international locations.
Analyze assessment results to identify common security gaps, trends, and differences across countries and regions.
Support the development of dashboards, reports, and presentations communicating assessment findings and maturity insights to leadership.
Collaborate with international technology teams and Information Security stakeholders to gather information and understand regional security practices.
Maintain assessment documentation, scoring information, and supporting artifacts to promote consistency and traceability.
Support identification and documentation of security risks, regional considerations, and opportunities for improvement.
Contribute to repeatable assessment processes, templates, and reporting practices that improve consistency and efficiency.
Participate in team meetings, provide progress updates, and communicate findings and recommendations to stakeholders.
Research emerging global security trends, security frameworks, and regional considerations.
Work with stakeholders to identify solutions that support business requirements.
Learn and apply new concepts, processes, and tools; take initiative in problem-solving and prioritize projects and deadlines.
Create and present a summary of the internship experience to management and peers at the end of the program.