Cybersecurity Internship Summer 2027 - Enterprise Risk Management

Tevora•Irvine, CA

6d•Onsite

About The Position

Tevora’s Cybersecurity Consultant Development Program is an immersive, paid-training internship designed to help participants build the technical and professional skills needed to enter the workforce as a full-time Information Security Associate. Interns join the client-facing consulting team as Developing Consultants and support project delivery in their selected information security practice area. This position focuses on Enterprise Risk Management (ERM), helping organizations assess and manage information security risks. The anticipated cohort dates are May 31 through August 6, 2027. The role is onsite in Fairfax, Virginia, or Irvine, California. Successful completion of the program may lead to a full-time offer as an entry-level Information Security Associate.

Requirements

Eligibility to work in the United States.
Must work onsite at the Fairfax, Virginia, or Irvine, California, location.
Bachelor’s degree from an accredited four-year university or military equivalent, or current enrollment at an accredited four-year university or military equivalent.
Basic familiarity with networking concepts such as firewalls, routers, switches, and DNS.
Basic familiarity with computer troubleshooting and server systems administration.
Basic familiarity with business planning and accounting.
Multi-tasking and time-management skills.
Dynamic, enthusiastic, and excellent interpersonal skills.
Excellent expository and technical writing and documentation skills.
Intermediate working knowledge of Excel and Word.
Self-starter who enjoys tinkering and learning independently.

Nice To Haves

Knowledge of compliance frameworks.
IT, Cybersecurity, or Information Security certifications.

Responsibilities

Develop technical and business skills needed to perform billable project work.
Learn about industry-standard certifications and their benefits.
Learn about national and international standards and frameworks, including PCI-DSS, HIPAA, and ISO 27001.
Observe implementations of enterprise security solutions.
Observe and assist with internal and external penetration testing and social engineering projects.
Plan technical execution plans to meet business requirements.
Gather requirements needed to complete execution plans.
Execute previously designed plans.
Document execution procedures and provide professional insights into the technologies involved.
Assist consultants with client engagements.
Aid in developing and maintaining Enterprise Risk Management programs for organizations across industries.
Conduct Enterprise Risk Assessments and analyze potential exposure at a strategic level.
Perform Vendor Risk Assessments for client organizations.
Develop governance frameworks and strategies for managing information security.
Provide general advisement to help organizations address information security risks arising from changes to strategic initiatives, projects, and infrastructure architecture.
Continually develop skills through personal development and participation in the information security industry.