Third Party Risk Intern

Crowe • Chicago, IL

128d • $27 - $42

About The Position

As a Third-Party Risk team member in Crowe's Consulting Practice, your role will be focused on helping clients identify cybersecurity risks in their vendor population. You will consult with clients to analyze their third-party cybersecurity programs, implement systems to automate third party management, assess their vendors' overall cybersecurity posture, and monitor cybersecurity incidents. Our clients rely on our expertise in cybersecurity to identify and help mitigate risk with their vendors and other third parties. As a consultant on our team, you will work with clients and their third parties to understand data flow, network architecture, cloud configurations, and general best cybersecurity practices. You will be responsible for identifying potential risks to client data and services and providing recommendations on steps to remediate. You will also work with clients to design and implement processes and technologies to better categorize and identify third party risk within their organization.

Requirements

• Currently pursuing a bachelor's or master's degree in Information Security, Computer Information Systems, Management Information Systems, or Computer Science
• Strong communication skills when consulting with senior management, C-Suite client personnel, and government regulators
• Robust business writing skills to effectively develop and present deliverables
• Strong critical thinking skills to solve complex problems and generate solutions
• Desire to work in a fast-paced learning environment
• Ability to adapt to continuously changing risk environments and effectively manage time
• Demonstrate intellectual curiosity to enable a deeply specialized skill set
• Strong ability to learn new skills quickly and the desire to have a career where you are continuously learning
• Exceptional problem-solving skills with the ability to think in a systematic, analytical fashion
• Self-motivated to deliver quality results, take responsibility and grow
• Ability to learn and work well both in teams and independently
• Capable of working in a demanding, deadline-driven environment
• Understanding of Cybersecurity frameworks such as NIST, ISO, etc.

Nice To Haves

• CompTIA Security + certification is preferred

Responsibilities

• Conducting a Third-Party Technology Risk Assessment
• Performing due diligence on an individual third-party relationship to assess the technology risks
• Performing a site visit to a third-party facility
• Assessing cloud technologies such as Software as a Service (SaaS) hosted applications, Platform as a Service (PaaS), and Infrastructure as a Service deployments (IaaS)
• Coordinating the schedules and assessments for key third party clients and overseeing all key deliverables
• Delivering high quality, thorough reports

Benefits

• Comprehensive total rewards package
• Career coaching and guidance
• Inclusive culture that values diversity

What This Job Offers

• Job Type: Full-time
• Career Level: Intern
• Industry: Professional, Scientific, and Technical Services
• Education Level: Bachelor's degree