(Summer) IT Governance, Risk and Compliance (GRC): May-August 2024

*Note: this role is for a Summer (May to August 2024) Internship or post-graduate internship*

In-Office (Needham, MA), Full Time

IT Governance, Risk and Compliance (GRC) Intern - Summer 2024 (May-August)

The SharkNinja Global Security and Privacy team seeks an intern to join a fast-paced, growing team.  This individual will be a key member of the team reporting to the Director, IT GRC. In this role, the intern will support initiatives and programs that reduce SharkNinja business risk in partnership with security, IT, and business stakeholders. The internship offers a variety of responsibilities with opportunities to make a mark on a growing company’s security program.

What you will do:  

• Collaborate with IT stakeholders and assist the team with IT general control performance and improvements to meet SOX audit requirements
• Review and report on vendor SOC reports as a contributor to the SOX internal controls program
• Assist in the evaluation of vendor cybersecurity maturity and report results to management & business stakeholders
• Aid with the evaluation and reporting of key regulatory requirements such as eCommerce PCI DSS
• Update policies that enhance cybersecurity & privacy program maturity
• Participate in risk remediation activities across IT and with business stakeholders through the risk register program

Experience:

• Pursuing a Bachelor of Science degree in Information Technology, Cybersecurity, Risk Management, or related field of study
• General understanding of audit methodologies and processes
• Familiarity with compliance programs including the NIST Cybersecurity Framework, PCI, and SOX

Who You are:

• Self-Starter who can work independently to deliver results and has a desire to continually learn and grow
• Team Player who values collaboration and relationship building to achieve shared outcomes
• Critical Thinker who can apply effective programs and process to mitigate business risk or improve operational performance
• Adaptable and able to react to shifting priorities, demands and timelines and effectively adjust priorities and execute tasks in a fast-paced environment; able to remain current with global regulations including IoT security regulations
• Effective at working with virtual teams in a global environment with strong communication and presentation skills