Third Party Risk Intern

Crowe•Indianapolis, IN

4d•$27 - $42•Onsite

About The Position

This internship role is within Crowe's Third-Party Risk team in the Consulting Practice. The focus is on helping clients identify cybersecurity risks in their vendor population. Interns will consult with clients to analyze their third-party cybersecurity programs, implement systems to automate third-party management, assess vendors' cybersecurity posture, and monitor cybersecurity incidents. The role involves understanding data flow, network architecture, cloud configurations, and cybersecurity best practices to identify and mitigate risks. Interns will also assist clients in designing and implementing processes and technologies to better categorize and identify third-party risk. Specific projects may include conducting Third-Party Technology Risk Assessments, performing due diligence on individual third-party relationships, assessing cloud technologies (SaaS, PaaS, IaaS), coordinating schedules and assessments for key third-party clients, overseeing deliverables, and delivering reports. The role emphasizes continuous learning, collaboration, and the application of technology, including emerging AI capabilities, to improve efficiency and client outcomes. Interns are expected to develop technical and transferable skills, think critically, and contribute to high-impact work. The role also involves assisting Life Sciences clients with their information security posture and privacy capabilities through security testing, program and technology implementations, and cybersecurity consulting services.

Requirements

Currently pursuing a bachelor’s or master’s degree in Information Security, Computer Information Systems, Management Information Systems, Computer Science, or a comparable major.
Understanding of Cybersecurity frameworks such as NIST, ISO, etc.
Strong communication skills.
Robust business writing skills.
Strong critical thinking skills.
Desire to work in a fast-paced learning environment.
Ability to adapt to continuously changing risk environments.
Ability to effectively manage time.
Intellectual curiosity.
Ability to cultivate and enable strong relationships within clients and community.
Strong ability to learn new skills quickly.
Exceptional problem-solving skills.
Ability to think in a systematic, analytical fashion.
Self-motivated to deliver quality results, take responsibility and grow.
Ability to learn and work well both in teams and independently.
Capable of working in a demanding, deadline-driven environment.
Entrepreneurial spirit.
Uphold Crowe’s values of Care, Trust, Courage, and Stewardship.
Act ethically and with integrity at all times.

Nice To Haves

CompTIA Security + certification is preferred.

Responsibilities

Help clients identify cybersecurity risks in their vendor population.
Consult with clients to analyze their third-party cybersecurity programs.
Implement systems to automate third-party management.
Assess vendors' overall cybersecurity posture.
Monitor cybersecurity incidents.
Understand data flow, network architecture, cloud configurations, and general best cybersecurity practices.
Identify potential risks to client data and services and provide recommendations for remediation.
Work with clients to design and implement processes and technologies to better categorize and identify third-party risk.
Conduct Third-Party Technology Risk Assessments.
Perform due diligence on individual third-party relationships to assess technology risks.
Perform a site visit to a third-party facility.
Assess cloud technologies such as Software as a Service (SaaS) hosted applications, Platform as a Service (PaaS), and Infrastructure as a Service deployments (IaaS).
Coordinate the schedules and assessments for key third-party clients and oversee all key deliverables.
Deliver high quality, thorough reports.
Assist Life Sciences clients to assess and refine their information security posture and privacy capabilities through security testing, program and technology implementations, and cybersecurity consulting services.
Exhibit strong communication skills when consulting with senior management, C-Suite client personnel, and government regulators.
Employ robust business writing skills to effectively develop and present deliverables.
Exhibit strong critical thinking skills to solve complex problems and generate solutions.
Adapt to continuously changing risk environments and effectively manage time.
Demonstrate intellectual curiosity to enable a deeply specialized skill set.
Cultivate and enable strong relationships within your clients and community.
Learn new skills quickly and have a career where you are continuously learning.
Solve problems in a systematic, analytical fashion.
Deliver quality results, take responsibility, and grow.
Learn and work well both in teams and independently.
Work in a demanding, deadline-driven environment.