Intern, Information Security Risk and Compliance

Sony•New York, NY

2d•Onsite

About The Position

Sony Corporation of America (SCA) is seeking an Intern, Information Security Risk and Compliance, to join the Information Security Department located in New York City. This position will report to the Manager, Information Security, and be a part of the team responsible for securing Sony’s information assets and continually enhancing SCA’s Information Security program. This internship is a great opportunity to get hands on experience across risk domains, help shape the future of security governance, and contribute to fostering a security-first culture.

Requirements

Current student pursuing a bachelor's degree in Cybersecurity, Computer Science, Information Security, or a related field.
Excellent writing skills with a proven ability to write clear, unambiguous instructions.
Demonstrated strong analytical, problem-solving skills, and attention to detail are essential.
All candidates must be authorized to work in the USA.

Nice To Haves

Working knowledge of regulatory frameworks (ISO 27001, NIST, PCI DSS) beneficial.
Working knowledge of GRC tools such as RSA Archer a plus.
Familiarity with cybersecurity best practices, and ability/interest in creating engaging awareness materials.

Responsibilities

Provide day-to-day operational and administrative support to the Governance, Risk, and Compliance (GRC) function within the program.
Support risk assessment of prospective third parties to evaluate their security posture and compliance practices.
Assist in preparing detailed reports on risk findings and security gaps following third-party risk assessment.
Assist in maintaining third-party asset inventory in the GRC tool.
Contribute to the development and improvement of third-party risk management processes.
Participate in the creation and delivery of information security awareness, training, and education program materials.