Intern, Information Security Risk and Compliance

Intern, Information Security Risk and Compliance

Sony Corporation of America (SCA), located in New York, NY, is the U.S. headquarters of Sony Group Corporation (Tokyo, Japan). SCA is seeking an Intern, Information Security Risk and Compliance, to join the Information Security Department located in New York City.

This position reports to the Manager, Information Security and is part of the team responsible for securing Sony’s information assets and continually enhancing SCA’s Information Security program.

Responsibilities

• Provide day-to-day operational and administrative support to the Governance, Risk, and Compliance (GRC) function within the program.
• Support risk assessment of prospective third parties to evaluate their security posture and compliance practices.
• Assist in preparing detailed reports on risk findings and security gaps following third-party risk assessments.
• Assist in maintaining third-party asset inventory in the GRC tool.
• Contribute to the development and improvement of third-party risk management processes.
• Participate in the creation and delivery of information security awareness, training, and education program materials.

Qualifications

• Current student pursuing a bachelor’s degree in Cybersecurity, Computer Science, Information Security, or a related field.
• Working knowledge of regulatory frameworks (ISO 27001, NIST, PCI DSS) is beneficial.
• Working knowledge of GRC tools such as RSA Archer is a plus.
• Familiarity with cybersecurity best practices, and the ability/interest in creating engaging awareness materials.
• Excellent writing skills with a proven ability to write clear, unambiguous instructions.
• Demonstrated strong analytical, problem-solving skills, and attention to detail.
• All candidates must be authorized to work in the USA.

Compensation

Target hourly rate: $24.00 per hour. The individual will be paid hourly and is eligible for overtime.