2026 Risk Management Internship

CFG Merchant Solutions • New York, NY

20h • Onsite

About The Position

CFG Merchant Solutions, LLC (CFGMS) is a rapidly growing alternative finance company that provides working capital to small and medium-sized businesses throughout the US through Revenue-Based Financing. We are looking for an enthusiastic intern to join our team for an internship in New York, NY. We are seeking a motivated and detail‑oriented Risk Management & Compliance Intern to help design and operationalize our risk management strategy and framework. This role will focus on building a scalable, practical risk program that aligns with SOC 2 Trust Services Criteria and is implemented through Vanta. This internship is ideal for recent graduates interested in cybersecurity, governance, risk, and compliance (GRC), and who want hands‑on experience building a real‑world risk management function at a growing organization.

Requirements

• Recently graduated (or graduating soon) with a degree in Information Security, Cybersecurity, Information Systems, Computer Science, Risk Management, Business, or a related field
• Strong interest in security, risk management, compliance, or auditing
• Analytical mindset with attention to detail
• Strong written and verbal communication skills
• Comfortable working with documentation, spreadsheets, and structured data
• Ability to manage tasks independently and meet deadlines

Responsibilities

• Assist in designing and documenting an enterprise risk management (ERM) framework aligned with SOC 2 requirements
• Support the creation and maintenance of a risk register, including risk identification, assessment, treatment, and tracking
• Map risks to SOC 2 Trust Services Criteria and related controls
• Configure and maintain risks, controls, and evidence workflows within Vanta
• Help define risk scoring methodologies, risk acceptance criteria, and escalation thresholds
• Collaborate with security, IT, engineering, and business stakeholders to gather risk and control inputs
• Support preparation for SOC 2 audits by ensuring risks and controls are clearly documented and supported by evidence
• Create clear documentation, diagrams, and summaries to communicate risk posture and framework design
• Identify opportunities to streamline or automate risk and compliance processes within Vanta

What This Job Offers

• Career Level: Intern