Summer Associate Internship (Technical Risk Analyst - Security Regulatory Compliance)

Summer Associate ProgramThe Security Regulatory Testing team within the Security Governance and Risk division (SG&R) is responsible for examining transactions and program documentation within the Security Business Units to ensure compliance with applicable regulations, or rules as directed by the Compliance Testing and Monitoring team.The Summer Associate Program is a 12-week internship program beginning in May 2027 and ending in August 2027. Students will work on impactful projects and meaningful work during their internship. To qualify for this position, applicants must be currently pursuing a degree from an accredited college or university and have an anticipated graduation date of December 2027 or later.Potential Projects:Regulatory Process Enhancement & Modernization (AI and Automation) - Evaluate current regulatory testing activities to identify repetitive, time-intensive tasks that could benefit from AI-assisted capabilities.

Develop a prioritized roadmap of AI use cases focused on improving productivity, quality, consistency, and analyst capacity.Reporting & Metrics Enhancement - Inventory reporting products and performance metrics to determine which measures effectively support decision-making and which create unnecessary effort. Recommend a future-state reporting framework that improves data quality, transparency, automation, and leadership visibility.Process Rationalization & Risk Mapping - Evaluate relationships between Security processes, risks, controls, standards, and regulatory requirements to improve traceability and reduce complexity.Produce a consolidated mapping model that supports process rationalization, risk coverage analysis, and future governance activities.Cross-function Shadowing - Shadow staff and leaders from other Security, Governance, and Risk functions to gain visibility into cross-team enterprise efforts such as issues management, incident management, and leadership reporting.ResponsibilitiesCollaborate with Security teams to identify potential risks and develop mitigation strategiesAssist in the implementation of, and adhere to Enterprise Operational Risk Management policies and proceduresStay updated on industry regulations, standards, and best practices related to fraud mitigation, physical security and risk managementSupport and/ or participate in audits and compliance assessments to ensure adherence to relevant regulationsProvide regular reports to senior management and stakeholders on risk findings, trends, and risk mitigation effortsWork with internal teams to promote risk awareness and drive a culture of risk management across the organizationQualificationsCurrently enrolled in an accredited college or university pursuing a Bachelor's or Master's degree in: Business, Risk Management, Accounting, Information Security or other related fields.Strong analytical and problem-solving skills.Effective verbal and written communication skillsStrong organizational and time management skills with the ability to work independently or on a team.Proficiency with Microsoft Office products including Excel, Word, PowerPoint, and Teams.Desired Qualifications:Coursework or experience in audit, risk management, compliance, internal controls, or cybersecurityFamiliarity with risk assessment frameworks or control frameworks such as COSO, NIST, FFIEC, ISO 27001, or COBITUnderstanding of governance, risk and compliance (GRC) conceptsExperience using data analysis tools such as Excel, Power BI, SQL, or similar technologiesInterest in pursuing careers in internal audit, compliance, risk management, security governance, or cybersecurity.Additional InformationHours:Monday - Friday, 8:00 AM - 4:30 PMLocation:820 Follin Lane, Vienna, VA Heritage Oaks Drive, Pensacola, FL Security Drive, Winchester, VA 22602