Summer 2027 Cyber Risk Management Analyst Undergraduate Intern

Highmark Health•Camp Hill, PA

About The Position

The Summer 2027 Cyber Risk Management Analyst Undergraduate Internship provides practical, hands-on experience identifying, assessing, and managing cybersecurity and information technology risks within a large healthcare technology environment. The intern joins the Cyber Risk Management team and works alongside cybersecurity professionals, security architects, technology teams, and business stakeholders to support information risk assessments and evaluate the effectiveness of security controls protecting enterprise systems, applications, and sensitive information. The role offers exposure to cyber risk assessments, security controls, compliance frameworks, risk mitigation, secure solution design, emerging technology risks, and secure software development lifecycle practices. Frameworks include HITRUST CSF, NIST, PCI-DSS, and ISO 27001. The intern may also gain exposure to secure AI adoption, AI model lifecycle security, data privacy, third-party AI and vendor risk, and automation in cyber risk management. Through mentorship, cross-functional collaboration, and real-world projects, the intern will develop cybersecurity, analytical, communication, and risk management skills. The position provides training and experience in the business line, introduces related career opportunities, and helps prepare participants for future positions in the business. Applicants must be independently authorized to work in the U.S.; visa sponsorship is not offered for this role.

Requirements

Full- or part-time enrollment in an accredited college or university baccalaureate program.
Currently pursuing a degree in Cybersecurity, Information Security, Computer Science, Information Technology, Information Systems, or a related technical discipline.
Knowledge of or academic exposure to the HITRUST CSF and NIST cybersecurity frameworks.
Knowledge of or familiarity with NIST risk assessment methodologies.
Must be independently authorized to work in the U.S.; visa sponsorship is not offered.

Responsibilities

Support cyber and information risk assessments.
Gather and analyze assessment evidence and conduct stakeholder interviews.
Assist with risk scoring and documenting assessment findings.
Maintain risk registers and monitor remediation activities.
Support cybersecurity compliance documentation and evaluate security controls.
Prepare presentations, recommendations, research, and reports for technical and business audiences.
Participate in projects and programs, including planning and implementation of initiatives within the assigned area.
Provide services supporting the day-to-day operating objectives of the assigned area under supervision and with guidance from senior personnel.
Explore opportunities to use AI and automation to enhance risk analysis, control validation, reporting, and cybersecurity metrics.
Perform related studies, enrichment programs, and other job-related duties as assigned.
Communicate effectively with colleagues, clientele, and internal or external constituencies in planning assignments and resolving day-to-day operational problems.
Comply with HIPAA, company privacy and information security policies, the Code of Business Conduct, applicable laws and regulations, and training requirements.