Cybersecurity Internship Fall 2026 - International Organization for Standardization (ISO)

Tevora•Fairfax, VA

28d•Onsite

About The Position

The Cybersecurity Consultant Development Program (Fall) at Tevora is an immersive, paid-training internship program designed to help participants strengthen the technical and professional skills needed to enter the workforce as a full-time Information Security Associate. This program focuses on the International Organization for Standardization (ISO) Security Practice Area. Tevora is a community of professionals passionate about cybersecurity, technology, and compliance, dedicated to creating more secure digital environments. We believe in combining smart, driven people with a supportive culture that celebrates continuous learning, diverse perspectives, and shared success.

Requirements

Basic familiarity with networking concepts like firewalls, routers, switches, and DNS
Basic familiarity with computer troubleshooting and server systems administration
Basic familiarity with business planning and accounting
Multi-tasking and time management skills
Dynamic, enthusiastic, and excellent interpersonal skills
Excellent writing both expository and technical documentation
Intermediate working knowledge of Excel and Word
Self-starter who likes to tinker and learn on their own
Bachelor's Degree from an accredited 4-year university (or Military equivalent) or currently enrolled at an accredited 4-year university (or Military equivalent)
Eligibility to work in the United States.
Required to work onsite at our Fairfax, VA, or Irvine, CA, location.

Nice To Haves

Any knowledge of compliance frameworks is a plus
IT, Cybersecurity, and Information Security certifications a plus

Responsibilities

Joining interviews with various clients' subject matter experts to assist in data collection
Assist in template and procedure creation for ISO Compliance and Risk solutions
Assist in report writing and the delivery of client reports
Learning about National and International standards, frameworks, and legislations that govern the industry, such as ISO 27000 series (e.g., 27001, 27017, 27018, 27701, etc.), ISO 22301, ISO 42001, and other international standards
Assess the security posture of organizations across a multitude of industries against internationally recognized ISO 27000 series standards established by the International Organization for Standardization (ISO)
Support organizations in the development of an ISO 27001-compliant Information Security Management System (ISMS), a systematic and iterative approach to managing organizational risk for all forms of sensitive data.
Aid organizations in aligning their ISMS with ISO 27018 and 27701, a globally recognized standard designed to ensure security and privacy of Personally Identifiable Information (PII) within Cloud applications or services.
Support organizations in the development of an ISO 22301 compliant Business Continuity Management Systems (BCMS), a systematic and iterative approach to managing organizational business and disaster recovery.
Develop technical and business skills required to perform billable work on projects as quickly as possible
Learn about industry-standard certifications and their benefits
Learn about National and International standards and frameworks like PCI-DSS, HIPAA, and ISO 27001
Observe implementations of Enterprise Security Solutions
Observe and help with internal and external penetration testing and social engineering projects
Plan technical execution plans to meet business requirements
Gather requirements to complete execution plans
Execute on previously designed plans
Document execution procedures and provide professional insights into the technologies involved
Assist Consultants with client engagements