Intern Risk and Compliance

• Using existing education and training, and knowledge learned on the job, the incumbent will work with various security technologies to support the audit and assessment of networked endpoints, servers, and network equipment.
• The incumbent will create original, and modify existing, policy and process documentation to cover the Risk and Compliance Analyst role.
• Attends team and any other meetings as appropriate.
• Other duties as assigned.
• Educate, Train, Do

For each task, the intern will be provided information to read, experience a one-on-one training session, and will have the opportunity to perform a task related to the training.  As appropriate, the intern will be assigned routine tasks and project activities.

Provided an overview of the following Frameworks, Regulations, Standards:

• NIST Cyber Security Framework (CSF)
• NIST 800-53, Security and Privacy Controls for Federal Information Systems and Organizations
• Payment Card Industry Data Security (PCI/DSS)
• Health Insurance Portability and Accountability Act (HIPAA)

Exposed to the following ACS IT Programs/Processes:

• Payment Card Industry Data Security (PCI/DSS) Standard Compliance 
• Internal Audit Compliance
• Supplier Risk Management Program
• Business Continuity/Disaster Recovery Program Management
• Policy Program Management
• Risk Management (including but not limited to responding to security requests for firewall changes, additions to whitelist controls, processing lost/stolen incidents)
• Application Security Program• Incident Response
• Vulnerability Management
• Firewall and other security device management
• To accomplish tasks, the intern will utilize the following technologies:
• SharePoint – Updating task lists, creating and formatting pages, updating a Wiki
• Microsoft products:  Excel, Word, Outlook, OneDrive, One Note
• Skype – Scheduling and conducting Skype meetings (with both data and voice components)
• LANDesk – Client Service Support System