Information Security Intern [2027 Intern Program]

DTCC•Jersey City, NJ

12h•$27 - $40•Hybrid

About The Position

As an Information Security Intern in IT, you will help protect DTCC’s technology environment and critical financial market infrastructure by supporting cybersecurity practices within the CISO organization. You will gain hands-on exposure to security operations, risk management, threat detection, vulnerability management, identity and access management, security governance, and compliance activities. Your work will help strengthen DTCC’s security posture, support operational resilience, and reduce risk across technology platforms, applications, and business processes. At DTCC, interns contribute to meaningful work while learning how the financial markets operate behind the scenes. You will be part of a structured summer experience that combines team-based project work, training, feedback, mentorship, and opportunities to connect with leaders and peers. The Summer Internship Program is a 10-week experience designed to build a strong foundation for early-career talent. The program includes orientation, training, manager engagement, feedback milestones, networking, and development experiences that help students explore potential full-time career paths, including EDGE, our entry-level development program, where applicable.

Requirements

Currently pursuing a bachelor’s degree in Cybersecurity, Information Security, Computer Science, Information Technology, Computer Engineering, Management Information Systems (MIS), Technology Management, or a related field.
Expected graduation date: Fall 2027 or Summer 2028
Minimum GPA: 3.2
Authorization to work permanently in the United States without current or future sponsorship.
Foundational understanding of cybersecurity concepts and frameworks, IT risk, networking, cloud, operating systems, identity and access management, vulnerability management, or security governance.

Nice To Haves

Coursework, projects, prior work, internship, student organization, volunteer, or leadership experience related to cybersecurity, information security, IT risk, audit, compliance, technology operations, or financial services technology.
Strong interest in cybersecurity, financial services, critical infrastructure, technology risk, operational resilience, or protecting systems and data in a highly regulated environment.
Exposure to tools, topics, or frameworks such as SIEM platforms, vulnerability scanning, endpoint security, cloud security, scripting or automation, data analysis, Microsoft Office 365, Excel, PowerPoint, Power BI, ServiceNow, Jira, NIST Cybersecurity Framework, ISO 27001, SOC, or security awareness practices.
Curiosity, initiative, and willingness to ask questions.
Strong communication, organization, and follow-through.
Analytical thinking and attention to detail.
Ability to use feedback and adapt as you learn.
Collaboration, professionalism, and accountability.

Responsibilities

Assist with cybersecurity risk assessments, security reviews, and control evaluations to help identify, document, and mitigate information security risks across systems, applications, infrastructure, and business processes.
Support security operations activities by monitoring alerts, reviewing security events, researching potential threats, documenting findings, and contributing to incident response and threat mitigation efforts under the guidance of experienced security professionals.
Collaborate with CISO teams, technology partners, infrastructure teams, application developers, and risk stakeholders to strengthen security controls and support internal policy, regulatory, audit, and governance expectations.
Help prepare security documentation, metrics, dashboards, procedures, job aids, and status updates that communicate risks, findings, remediation progress, and key outcomes to technical and non-technical audiences.
Support vulnerability management, access management, security awareness, compliance, and control testing activities by collecting data, analyzing results, tracking actions, and helping teams drive timely remediation.
Research emerging cybersecurity threats, industry trends, financial services security practices, and security technologies while contributing to projects that protect critical financial market infrastructure.