Summer 2026 Technology and Information Compliance Undergraduate Intern

Company :

Highmark Health

Job Description : 

Applicants must be authorized to work in the U.S. independently. At this time, we do not offer visa sponsorship for this role.

SUMMARY OF JOB RESPONSIBILITIES 

This job has the goal of providing the opportunity to acquire practical experience through direct exposure to the related business line(s) and to develop the next generation of diverse business professionals.  To that end, the program will provide hands-on training and experience in the business line, expose the various career opportunities in the business line and related areas, and prepare participants for positions in the business.

Typical responsibilities include, providing services to the day-to-day operating objectives of the assigned area, participating in projects and programs appropriate to the needs of the assigned area, participating in the planning and implementation of projects and initiatives, conducting research and reporting including recommendations or proposals for action.

• Support Compliance Assessments:
  • Assists in collecting and organizing documentation for compliance assessment activities (e.g., NIST, HITRUST, PCI, HIPAA, SOC, MAR, CMS, JCAHO).
  • Aids in the verification of evidence and supporting documentation, learning about audit quality standards.
  • Helps prepare draft sections of reports and other management reporting materials under supervision.
• Assist with Risk Management Processes:
  • Supports the scheduling, distribution, and follow-up on risk questionnaires and other assessment requests to help ensure timely completion.
  • Learns about identifying, assessing, and evaluating compliance, financial, information security, and privacy risks.
  • Helps with reviewing inherent risk assessment results and understanding engagement risks.
• Data Organization and Reporting:
  • Assists with documenting and organizing information related to data flow, information sharing activities, and security safeguards.
  • Supports the maintenance of supplier risk management dashboards and records in applications like RSA Archer, ensuring data accuracy and completeness.
  • Helps prepare supporting materials for risk assurance reports for management.
• Cross-Functional Collaboration & Documentation:
  • Collaborates with team members and other departments (e.g., Information Security, Privacy, Procurement) to understand alignment of risk management objectives.
  • Assists in maintaining departmental procedures, assessment methodologies, and training materials.
  • Helps document activities to demonstrate compliance with departmental metrics and awareness of contractual/regulatory requirements.
• Learning and Development:
  • Participates in team meetings and discussions to learn about current compliance engagements and challenges.
  • Gains exposure to interpreting less complex authoritative guidance and contractual requirements.
  • Interfaces with business areas and technical staff to understand cross-functional risk assurance projects.
  • Performs other duties as assigned or requested, providing support to the team as needed.

REQUIRED QUALIFICATIONS 

• Full or part-time enrollment in an accredited college or university baccalaureate program.

PREFERRED QUALIFICATIONS

• Graduation date: 2027 or 2028
• Major in Information Technology, Information Security, or Risk Management

  

ESSENTIAL JOB FUNCTIONS 
1. Communicate effectively while interacting directly with colleagues, clientele, and/or other internal or external constituencies in the planning of assignments and the resolution of day-to-day operational problems. 

2. Under supervision, provide entry-level professional services as appropriate to the day-to-day operating objectives of the area.  Receives guidance, training, and mentoring from senior personnel in planning and carrying out activities and assignments.

3. Undertake and/or participates in projects and programs designed to develop professional skills and expertise appropriate to the needs of the organization. 

4.  Participate in the planning and implementation of unit projects and initiatives within area of expertise and ability. 

5. As specifically requested by management, conduct research and reporting inclusive of recommendations or alternative proposals for action. 

6. Undertake related studies or enrichment programs as appropriate to the specific objectives of the operating unit. 

7. Perform miscellaneous job-related dut