Cybersecurity Internship Summer 2027 - International Organization for Standardization (ISO)

Tevora•Irvine, CA

6d•Onsite

About The Position

Tevora’s Cybersecurity Consultant Development Program is an immersive, paid-training internship intended to develop the technical and professional skills needed to enter the workforce as a full-time Information Security Associate. Developing Consultants participate in client-facing project delivery across Tevora’s information security practice areas, including Enterprise Risk, Compliance, Solutions Implementation, and Threat Research. Interns are expected to continually build their skills through personal development and participation in the information security industry. In the International Organization for Standardization (ISO) security practice area, interns may assist with client interviews and data collection, develop templates and procedures for ISO compliance and risk solutions, and support client report writing and delivery. They learn about national and international standards, frameworks, and legislation, and help assess organizational security posture and develop ISO-aligned information security and business continuity management systems. The anticipated cohort dates are May 31 through August 6, 2027. The position is required to work onsite in Fairfax, Virginia, or Irvine, California. Compensation is $27 per hour. Successful completion of the program may lead to a full-time offer as an entry-level Information Security Associate.

Requirements

Eligibility to work in the United States.
Must work onsite at the Fairfax, Virginia, or Irvine, California, location.
Bachelor’s degree from an accredited four-year university or military equivalent, or current enrollment at an accredited four-year university or military equivalent.
Basic familiarity with networking concepts such as firewalls, routers, switches, and DNS.
Basic familiarity with computer troubleshooting and server systems administration.
Basic familiarity with business planning and accounting.
Multi-tasking and time-management skills.
Dynamic, enthusiastic, and excellent interpersonal skills.
Excellent expository and technical writing and documentation skills.
Intermediate working knowledge of Excel and Word.
Self-starter who likes to tinker and learn independently.

Nice To Haves

Knowledge of compliance frameworks.
IT, cybersecurity, or information security certifications.

Responsibilities

Develop technical and business skills required to perform billable project work as quickly as possible.
Learn about industry-standard certifications and their benefits.
Learn about national and international standards and frameworks, including PCI-DSS, HIPAA, and ISO 27001.
Observe implementations of enterprise security solutions.
Observe and assist with internal and external penetration testing and social engineering projects.
Plan technical execution plans to meet business requirements.
Gather requirements needed to complete execution plans.
Execute previously designed plans.
Document execution procedures and provide professional insights into the technologies involved.
Assist consultants with client engagements.
Join interviews with client subject matter experts to assist with data collection.
Assist with creating templates and procedures for ISO compliance and risk solutions.
Assist with writing and delivering client reports.
Assess organizations’ security posture against internationally recognized ISO 27000 series standards.
Support development of ISO 27001-compliant Information Security Management Systems (ISMS).
Assist organizations in aligning their ISMS with ISO 27018 and ISO 27701 for security and privacy of personally identifiable information in cloud applications or services.
Support development of ISO 22301-compliant Business Continuity Management Systems (BCMS).