Business Information Security Intern

POSITION SUMMARY: 

The Business Information Security Intern will report directly to the Business Information Security Officer (BISO) and will assist the BISO by participating in all activities of the group, which cover Information Security, Privacy, SOX/IT Compliance, Audit Assessments, and IT Control Training.

ESSENTIAL FUNCTIONS:

• Supporting year-round analysis and risk reporting of vulnerable devices
• Identify owners of assets with vulnerabilities and confirm resolutions.
• Promoting information security awareness to all employees
• Reporting and monitoring high value metrics for: risk mitigation, IT controls, and exception filings using internal tools. escalating any security, privacy, or Red Flags incidents as appropriate
• Updating content of e-newsletters and websites.
• Run reports from various enterprise tool (SEP, Ivanti, Open Pages, Active Directory)
• Maintaining data in OpenPages (uploads, updates, reporting)
• Perform additional duties and projects as assigned 

EDUCATION, SKILLS AND EXPERIENCE REQUIREMENTS:

• Pursuing: BA / BS degree in Information Systems, Cyber Security, Information Business Systems someone who understand processes or Information Assurance (or related discipline)
• Strong skills with Microsoft Office Suite, expert level skillset in Excel (formula writing, CSV support, pivot tables, able to write VBA code), PowerPoint and Visio. Hands on experience with Power BI is a plus
• Information Risk Management and/or Information Security Risk, Risk Management or Risk-Based Compliance frameworks
• Knowledge of the following a plus
  • NIST Information Assurance Guidelines
  • ISO 27001/27002 Controls
  • Network vulnerability management and compliance tools i.e. Nessus Security Center, and Rapid 7. GRC Systems / Risk Management Software products
• Attentive to details, dedication to high quality work.
• Familiarity with Sarbanes-Oxley requirements and controls
• Some project management and/or business analysis experience is a plus
• Strong written and verbal communication skills

IPG is an equal opportunity employer and we value diversity, inclusion and equity at our company. We provide equal employment opportunities to all employees and applicants for employment without regard to race, color, religion, creed, national origin, gender, sexual orientation, age, gender identity, marital status, citizenship, disability, genetic information or veteran status or any other basis prohibited by applicable federal, state or local law.