Cybersecurity Internship Summer 2027 - Enterprise Risk Management

Tevora•Fairfax, VA

5d•Onsite

About The Position

Tevora’s Cybersecurity Consultant Development Program is an immersive, paid-training internship designed to build the technical and professional skills needed to enter the workforce as a full-time Information Security Associate. The Developing Consultant (DC) is an early-career member of the client-facing consulting team who supports project delivery in a selected information security practice area. This position is in Enterprise Risk Management (ERM) and is based onsite in either Fairfax, Virginia, or Irvine, California. The anticipated cohort dates are May 31 through August 6, 2027. In the ERM practice, the Developing Consultant helps develop and maintain enterprise risk management programs, conduct enterprise and vendor risk assessments, create information security governance frameworks and strategies, and advise organizations on security risks related to strategic initiatives, projects, and infrastructure changes. Interns develop their abilities through project work, personal development, and participation in the information security industry. Successful completion of the program may lead to a full-time offer as an entry-level Information Security Associate.

Requirements

Eligibility to work in the United States.
Ability to work onsite at the Fairfax, Virginia, or Irvine, California, location.
Bachelor’s degree from an accredited four-year university, military equivalent, or current enrollment at an accredited four-year university or military equivalent.
Basic familiarity with networking concepts such as firewalls, routers, switches, and DNS.
Basic familiarity with computer troubleshooting and server systems administration.
Basic familiarity with business planning and accounting.
Ability to multitask and manage time.
Excellent interpersonal skills; dynamic and enthusiastic approach.
Excellent expository writing and technical documentation skills.
Intermediate working knowledge of Excel and Word.
Self-starter who enjoys tinkering and learning independently.

Nice To Haves

Knowledge of compliance frameworks.
IT, cybersecurity, or information security certifications.

Responsibilities

Develop technical and business skills to perform billable project work as quickly as possible.
Learn about industry-standard certifications and their benefits.
Learn about national and international standards and frameworks, including PCI-DSS, HIPAA, and ISO 27001.
Observe implementations of enterprise security solutions.
Observe and assist with internal and external penetration testing and social engineering projects.
Plan technical execution plans to meet business requirements.
Gather requirements needed to complete execution plans.
Execute previously designed plans.
Document execution procedures and provide professional insights into the technologies involved.
Assist consultants with client engagements.
Help develop and maintain enterprise risk management programs.
Conduct enterprise risk assessments and analyze potential exposure at a strategic level.
Perform vendor risk assessments for client organizations.
Develop information security governance frameworks and strategies.
Provide general advisement to help organizations address information security risks associated with strategic initiatives, projects, and infrastructure architecture changes.