Information Risk Management Intern
About The Position
Are you interested in how large organizations manage risk, strengthen controls, and build sustainable governance processes? Trinity Industries is seeking a motivated Information Risk Management Program Intern to help redesign a key enterprise initiative that will shape how we monitor and maintain compliance across our technology ecosystem. This is a high-impact internship where you’ll work directly with Information Risk Management (IRM) leaders and technology teams to rebuild a program that supports continuous compliance, improves visibility, and reduces risk across applications, infrastructure, hardware, and IT services. What You’ll Work On: You’ll play a central role in reimagining the Information Compliance Self‑Assessment Program, including: Evaluating the original program design to identify root causes for low adoption and scalability challenges Developing a structured, directive‑aligned question library based on policies, standards, and requirements Designing a modernized assessment and routing model aligned to control themes and system types Identifying automation opportunities using Microsoft 365 tools such as SharePoint, Power Automate, Excel, and Power BI Supporting reporting and documentation to prepare for enterprise rollout and audit readiness Your work will directly contribute to Trinity’s broader goals of strengthening governance, improving compliance posture, and enhancing control effectiveness across the organization What You’ll Deliver: By the end of the internship, you’ll produce: A directive‑aligned question library A redesigned self‑assessment workflow A documentation package supporting process adoption A dashboard or reporting concept A final presentation summarizing your recommendations and design decisions These deliverables will give you tangible, portfolio‑ready experience in governance and compliance design What You’ll Learn: This internship offers exposure across cybersecurity, IT, and enterprise governance and you'll gain hands-on experience with governance, risk, and compliance (GRC) operations Insight into how directive documents translate into real-world controls and compliance activities Skills in process design, workflow modeling, and structured documentation Practical experience using Microsoft 365 tools for automation and reporting Strengthened analytical, communication, and stakeholder‑engagement capabilities
Requirements
- Candidates pursuing a bachelor’s or master’s degree in Cybersecurity, Information Systems, Business, Data Analytics, Computer Science, or a related field
- Strong analytical and critical-thinking skills
- Clear written and verbal communication abilities
- Comfort working cross-functionally with technical and non-technical stakeholders
- Familiarity with Microsoft Office or Microsoft 365 applications
Responsibilities
- Evaluating the original program design to identify root causes for low adoption and scalability challenges
- Developing a structured, directive‑aligned question library based on policies, standards, and requirements
- Designing a modernized assessment and routing model aligned to control themes and system types
- Identifying automation opportunities using Microsoft 365 tools such as SharePoint, Power Automate, Excel, and Power BI
- Supporting reporting and documentation to prepare for enterprise rollout and audit readiness
Stand Out From the Crowd
Upload your resume and get instant feedback on how well it matches this job.
What This Job Offers
Career Level
Intern
Number of Employees
1,001-5,000 employees
