2027 TRC Winter Internship - West Des Moines
About The Position
UHY is seeking an intern to join our Technology, Risk, and Compliance (TRC) practice. This internship provides an opportunity to gain hands-on experience supporting client engagements involving cybersecurity risk assessments, compliance reviews, control evaluations, and selected technical security testing activities. The intern will work with professionals across a variety of industries and will assist in delivering services aligned to recognized cybersecurity frameworks and standards, including NIST Cybersecurity Framework (CSF), NIST SP 800-53, NIST SP 800-171, CMMC, and PCI DSS. This position is well suited for a candidate interested in cybersecurity consulting, risk and control assessment, compliance advisory, and professional services within an accounting and advisory firm environment.
Requirements
- 0 – 1 year of relevant experience
- Currently pursuing a bachelor’s or master’s degree in information systems, information technology, computer science, accounting Information Systems, cybersecurity or a related field
- Basic understanding of cybersecurity principles, including access control, vulnerability management, networking, endpoint security, and security best practices
- Strong written and verbal communication skills
- Strong organizational skills and attention to detail
- Ability to handle sensitive and confidential information with professionalism and discretion
- Proficiency in Microsoft Office applications, including Word, Excel, and PowerPoint
- Ability to work both independently and collaboratively in a team environment
Nice To Haves
- Familiarity with one or more cybersecurity frameworks or standards, such as NIST CSF, NIST 800-53, NIST 800-171, CMMC, CIS Controls, or PCI DSS
- Exposure to cybersecurity assessment, audit, or compliance concepts through coursework, labs, projects, or prior internship experience
- Foundational knowledge of vulnerability scanning, system hardening, cloud security, or basic penetration testing concepts
- Interest in consulting, advisory services, audit, or risk management
Responsibilities
- Assist with technology and cybersecurity risk assessments and advisory engagements for clients in various industries
- Support evaluation of client environments against established frameworks, standards, and control requirements
- Review and organize client-provided documentation, including policies, procedures, system inventories, diagrams, and evidence
- Help document assessment results, observations, risks, and recommendations in a clear, accurate, and professional manner
- Perform research on cybersecurity requirements, industry practices, and applicable regulatory or framework expectations
- Support mapping of controls and requirements across frameworks such as NIST CSF, NIST 800-53, NIST 800-171, CMMC, and PCI DSS
- Assist with vulnerability assessments and limited penetration testing activities under the supervision of senior team members
- Participate in client interviews, walkthroughs, and internal team discussions, as appropriate
- Prepare and maintain engagement workpapers, status trackers, spreadsheets, and presentation materials
- Support internal practice development activities, including methodology enhancement, template creation, and knowledge-sharing initiatives
- Perform other duties as assigned
Benefits
- group health insurance
- dental and vision coverage
- 401(k) retirement plans
- generous paid time off (PTO) allowances
Stand Out From the Crowd
Upload your resume and get instant feedback on how well it matches this job.
What This Job Offers
Career Level
Intern
Education Level
No Education Listed
