Third Party Risk Intern

Crowe • Chicago, IL

3d

About The Position

Crowe is seeking individuals who are curious, adaptable, and eager to learn to join their dynamic consulting business. As technology and AI reshape the consulting landscape, consultants at Crowe are expected to build technical and transferable skills, think critically, and use technology to solve real business problems. This role involves continuous learning, collaboration across teams, and exploring how tools, including emerging AI capabilities, can improve efficiency, insights, and client outcomes. As you grow, you will take ownership of client relationships, contribute to account strategy, and support the delivery of high-impact work. Success in this role comes from a growth mindset, strong communication skills, advanced critical thinking, and the ability to navigate new challenges with confidence. As a Third-Party Risk team member in Crowe’s Consulting Practice, your role will be focused on helping clients identify cybersecurity risks in their vendor population. You will consult with clients to analyze their third-party cybersecurity programs, implement systems to automate third party management, assess their vendors’ overall cybersecurity posture, and monitor cybersecurity incidents. Our clients rely on our expertise in cybersecurity to identify and help mitigate risk with their vendors and other third parties. As a consultant on our team, you will work with clients and their third parties to understand data flow, network architecture, cloud configurations, and general best cybersecurity practices. You will be responsible for identifying potential risks to client data and services and providing recommendations on steps to remediate. You will also work with clients to design and implement processes and technologies to better categorize and identify third party risk within their organization.

Requirements

• Currently pursuing a bachelor’s or master’s degree in one of the following preferred majors (or comparable major): Information Security, Computer Information Systems, Management Information Systems, Computer Science.
• Understanding of Cybersecurity frameworks such as NIST, ISO, etc.
• Exhibit strong communication skills.
• Employ robust business writing skills.
• Exhibit strong critical thinking skills.
• Desire to work in a fast-paced learning environment.
• Demonstrate intellectual curiosity to enable a deeply specialized skill set.
• Strong ability to learn new skills quickly and the desire to have a career where you are continuously learning.
• Exceptional problem-solving skills with the ability to think in a systematic, analytical fashion.
• Self-motivated to deliver quality results, take responsibility and grow.
• Entrepreneurial spirit.

Nice To Haves

• CompTIA Security + certification is preferred.

Responsibilities

• Help clients identify cybersecurity risks in their vendor population.
• Consult with clients to analyze their third-party cybersecurity programs.
• Implement systems to automate third party management.
• Assess their vendors’ overall cybersecurity posture.
• Monitor cybersecurity incidents.
• Work with clients and their third parties to understand data flow, network architecture, cloud configurations, and general best cybersecurity practices.
• Identify potential risks to client data and services and provide recommendations on steps to remediate.
• Work with clients to design and implement processes and technologies to better categorize and identify third party risk within their organization.
• Conduct a Third-Party Technology Risk Assessment.
• Perform due diligence on an individual third-party relationship to assess the technology risks.
• Perform a site visit to a third-party facility.
• Assess cloud technologies such as Software as a Service (SaaS) hosted applications, Platform as a Service (PaaS), and Infrastructure as a Service deployments (IaaS).
• Coordinate the schedules and assessments for key third party clients and oversee all key deliverables.
• Deliver high quality, thorough reports.
• Assist our Life Sciences clients to assess and refine their information security posture and privacy capabilities through security testing, program and technology implementations, and cybersecurity consulting services.
• Exhibit strong communication skills when consulting with senior management, C-Suite client personnel, and government regulators.
• Employ robust business writing skills to effectively develop and present deliverables.
• Exhibit strong critical thinking skills to solve complex problems and generate solutions.
• Adapt to continuously changing risk environments and effectively manage time.
• Cultivate and enable strong relationships within your clients and community.
• Learn and work well both in teams and independently.
• Work in a demanding, deadline-driven environment.

Benefits

• Real flexibility to balance work with life moments
• Equitable access to opportunities for career growth and leadership
• Nurture your talent in an inclusive culture that values diversity
• Chance to meet on a consistent basis with your Career Coach that will guide you in your career goals and aspirations.

What This Job Offers

• Career Level: Intern