IT GRC Intern

Valvoline•Lexington, KY

21d

About The Position

Valvoline is seeking an IT GRC Intern to partner with and support its IT Governance, Risk, and Compliance Team. The intern will assist with third-party risk management, security awareness and compliance training, and risk management programs. The internship offers an opportunity to learn about the field of Information Security. The position is located in Lexington, Kentucky.

Requirements

Be pursuing a bachelor's degree in Information Technology or a related field.
Be proficient with the Microsoft Office suite.
Be able to maintain confidentiality and appropriately handle sensitive information.
Have experience developing presentations, reporting, and analyzing.
Be able to solve complex issues within a team environment.
Have strong verbal and written communication abilities and effective interpersonal skills.
Have a strong sense of urgency.
Have a strong work ethic and attention to detail.
Be authorized to work in the United States for any employer.

Nice To Haves

Knowledge of cybersecurity frameworks such as NIST and ISO.
Familiarity with vulnerability and other security scan tools.

Responsibilities

Perform and evaluate risk assessments, including third-party security assessments, SOC reviews, and privacy impact assessments.
Assist with the security awareness training program and simulated phishing campaigns.
Generate and track security metrics, develop scorecards, and communicate results to appropriate members.
Maintain and update the Information Security site and related collaboration sites containing communications, documentation, and artifacts.
Drive progress toward outcomes for GRC-related continuous improvement projects, such as DLP and DSPM.