IT Risk Analyst Internship

Symetra • ,

24d • $22 - $25 • Remote

About The Position

The IT Risk Analyst Internship is a full-time, paid, 12-week internship taking place in summer 2027. The position is 100% remote, with the option to work from a Symetra office if local. The intern will work alongside experienced information security and risk professionals and gain practical exposure to IT risk management, cybersecurity governance, audit and compliance, and third-party risk management.

The intern will contribute to projects that help Symetra identify technology risks, evaluate security controls, support regulatory and audit requirements, and strengthen the company’s risk posture. The role involves hands-on assignments and collaboration with Information Security, IT, Audit Services, Procurement, and business teams. Interns can also participate in learning sessions with senior leadership and community-building activities with other interns.

Requirements

• Bachelor’s degree in progress or recently completed in information systems, cybersecurity, computer science, accounting, business, risk management, or a related field.
• Interest in IT risk management, information security, cybersecurity governance, audit, compliance, or third-party risk management.
• Beginner-to-intermediate proficiency with Microsoft Excel, PowerPoint, Word, and other Microsoft Office applications.
• Strong analytical, problem-solving, written communication, and verbal communication skills.
• Strong organizational skills and attention to detail, with the ability to manage multiple assignments and meet deadlines.
• Ability to work independently while collaborating effectively with team members and stakeholders across different business areas.
• Applicants must be currently authorized to work in the United States and maintain authorization throughout employment; employer work visa sponsorship and support are not provided.
• Remote employees must have an internet connection of at least 100 Mbps download and 20 Mbps upload using fiber, cable, or DSL. Satellite, cellular broadband, other wireless technologies, and wired dial-up are not permissible.
• Candidates must be on video for all interviews after the initial phone screen and comply with identity-verification procedures.

Nice To Haves

• Familiarity with internal controls, ISO 27001, SOX IT General Controls, SOC reports, or other risk and security frameworks through coursework, projects, or prior experience; preferred but not required.

Responsibilities

• Assist with IT risk management activities, including researching risks, documenting assessments, maintaining risk records, and tracking mitigation efforts.
• Support IT audit and compliance activities related to frameworks and requirements such as ISO 27001 and Sarbanes-Oxley IT General Controls.
• Gather, organize, and review documentation and evidence used to demonstrate that security and technology controls are operating effectively.
• Assist with third-party technology risk reviews by analyzing security questionnaires, SOC reports, ISO 27001 certifications, penetration-testing results, and other vendor documentation.
• Work with IT, Information Security, Audit Services, Procurement, and business stakeholders to track requests, findings, and remediation activities.
• Help prepare reports, dashboards, and presentations that communicate risk, audit, compliance, and remediation information to stakeholders and leadership.
• Research emerging cybersecurity threats, technologies, regulatory developments, and industry practices that could affect Symetra.
• Support improvements to risk management processes, procedures, tools, and documentation.
• Participate in team meetings and contribute ideas while learning how technology and security risks are managed within a financial services organization.

Benefits

• Paid internship with hourly compensation of $22.00–$25.00.
• Equipment shipped to support working remotely from home.
• Hands-on experience supporting real-world IT risk, cybersecurity, audit, and compliance initiatives.
• Opportunities to learn from experienced risk and security professionals and collaborate with teams across the organization.
• Sessions with senior leaders and opportunities to connect with other interns throughout the program.

What This Job Offers

• Job Type: Full-time
• Career Level: Intern