CDS Intern - Security Governance and Policy

Costco IT is responsible for the technical future of Costco Wholesale, the third largest retailer in the world with wholesale operations in fourteen countries. Despite our size and explosive international expansion, we continue to provide a family, employee centric atmosphere in which our employees thrive and succeed.

This is an environment unlike anything in the high-tech world and the secret of Costco’s success is its culture. The value Costco puts on its employees is well documented in articles from a variety of publishers including Bloomberg and Forbes. Our employees and our members come FIRST.  Costco is well known for its generosity and community service and has won many awards for its philanthropy. The company joins with its employees to take an active role in volunteering by sponsoring many opportunities to help others. 

Come join the Costco Wholesale IT family. Costco IT is a dynamic, fast-paced environment, working through exciting transformation efforts. We are building the next generation retail environment where you will be surrounded by dedicated and highly professional employees.

The Costco Digital Services Division is inviting students currently enrolled in an IT or related undergraduate or graduate program at a college or university to participate in a twelve -week paid internship program during  2026. Interns will work within specific areas in Costco’s Information Systems Division. Interns will attend presentations given by various members of Executive Management from IT and other areas of the Company. Interns will be responsible for their own travel and accommodation expenses. Housing is not provided. The program runs mid June to early September and is located in Issaquah, WA. No out of state work allowed. All interns will adhere to the CDS hybrid work model of three days onsite and two days remote.

The Security Governance team supports the overarching values and business goals of Costco by building a scalable, data-driven governance program that drives consistent Information Technology control adoption and operational excellence. Security Governance is responsible for translating complex regulatory and framework requirements into actionable security expectations to ensure our technical environments remain secure and resilient. The Security Governance team works closely with other teams within Cybersecurity and Information Security to ensure continued compliance with Costco’s policies and industry standards.

The IT Security Governance & Compliance intern is a key member of the IT Information Security and Compliance team reporting to the Manager of Security Governance. This position will be focused on the foundational aspects of technical governance, including the review of control testing and applicable guidance, and the collection of evidence for regulatory compliance. This includes, but is not limited to, supporting the design of repeatable workflows, assisting with maturity assessments and artifacts, and helping to maintain automated governance capabilities within GRC platforms (such as Onspring). This position will be focused on data-driven processes with an emphasis on security frameworks like NIST CSF and CIS 18, as well as understanding of regulatory standards such as HIPAA, GDPR, SOX, and PCI.

The IT Security Governance intern will work closely with global technology teams, architects, engineers, developers, analysts, and product owners, to maintain a strong security posture. By supporting established security controls and governance processes, the intern helps ensure that Costco’s technology solutions align with the security, risk, and compliance requirements defined by Information Security leadership and business stakeholders.

NOTE: While participating in the IT Internship program, an individual will be classified as an hourly temporary employee for the duration of the program. During the program, the individual may be asked to undergo the normal interview process for a level 1 position. If the individual is offered a position, they will be converted to the employment status matching the open job they were selected for. If they are not selected for a regular position, the internship position will be complete in a maximum of twelve weeks.

ROLE

• Works with stakeholders to identify solutions that support their business requirements.
• Works independently and within a team environment.
• <