Intern, Cyber Risk Management-Remote

Overview

Now is the time to join us and make a difference.  Be a relentless force for a world of longer, healthier lives.  Here at the American Heart Association, you matter and so does your career.

 

The Cybersecurity Risk Management team is excited to welcome an intern to support our efforts in managing cyber risks and protecting our organization's assets. As an intern, you will have the opportunity to learn and grow alongside our team of expert professionals, gaining hands-on experience in various aspects of cybersecurity risk management, including risk assessments, vulnerability management, and incident response.

The American Heart Association’s Internship Program provides college students an opportunity for hands-on experience in various facets for individuals interested in gaining work experience with a non-profit, voluntary health organization. 

 

To be considered for this role, you should have a basic understanding of cybersecurity concepts, including threat modeling and risk assessment methodologies. Strong analytical skills and attention to detail are also critical, as you will be responsible for analyzing data and identifying potential security issues. Individuals will obtain practical experience and receive hands-on training in various subject areas, to include volunteer recruitment/management, community event planning and management, public health research, community partner networking/connection, and program development/implementation. 

The Association offers many resources to help you maintain work-life harmonization through your changing needs and life situations.  To help you be successful, you will have access to Heart U, our award-winning corporate university, as well as training and support locally and through our National Center.

#TheAHALife is our company culture, our way of life, reflecting our diversity and inclusion, our focus on work-life harmonization and our Guiding Values.  Discover why you will Be Seen.  Be Heard. Be Valued™ at the American Heart Association by following us on LinkedIn, Instagram, Facebook, Twitter, and at heart.org.

Internship Overview:

• Time Commitment: 25 hours per week
• Internship Duration: 5/20/2024 - 8/9/2024
• Remote Position
• Salary: $23.00 per hour

Internship Outcomes:

Individuals participating in the internship program are provided with an opportunity to:

• Gain meaningful and practical job skills to be successful in a non-profit environment
• Opportunity to explore a career-path with a reputable voluntary health/service organization
• Gain experience in the professional world while learning about board management
• Complete an internship that enriches your academic and professional resume as well as enriching your personal life by making a difference in the lives of others

 

Responsibilities

Tasks could include things like the following:

• Act as ‘first line of defense’ analyzing and assessing third party contracts for technological risks and compliance.
• Maintain inventory of all digital assets and applications.
• Propose and document risk mitigation strategies in partnership with the business.
• Liaison with Legal Department’s risk analysis and documentation department to ensure IT and Legal work collaboratively to secure the organization.
• Gather and document requirements for CyberSecurity Risk Department initiatives including internal PCI Compliance Attestation, Penetration Testing, etc.
• Learn to write CyberSecurity new policies, evaluating existing policies, and maintaining policy library.
• Learn how to conduct third-party certificate and attestation audits to ensure all third-party contracts.
• Work alongside Risk manager and learn how to handle third parties during data breach or security incidents to document potential impacts to the organization.
• Be a part of a strong CyberSecurity team through collaboration, communication, and knowledge share.
• Investigate applicable regulatory risks from changes or additions to regulatory guidance and requirements from legal and Cyber.

 

Qualifications

• An understanding of key technology concepts such as access control, confidential data, encryption, business continuity, info-sec scans, and vendor apps.
• Knowledge of IT organization business processes and systems including (IT Security, data management, architectural and planning, technology life cycle management, regulatory concerns).
• Beginning understanding of risk management functions, including IT audit, cyber security, and/or IT compliance.
• Experience or knowledge of 3rd party/vendor management lifecycle.
• Strong oral and written communication skills to