Information Security Intern [2027 Intern Program]

The Depository Trust & Clearing Corporation (DTCC) is seeking an Information Security Intern to support cybersecurity practices within its CISO organization. The role provides hands-on experience in security operations, risk management, threat detection, vulnerability management, identity and access management, governance, compliance, and protection of critical financial market infrastructure.

What you'll do:

• Assist with cybersecurity risk assessments, security reviews, and control evaluations to help identify, document, and mitigate information security risks across systems, applications, infrastructure, and business processes
• Support security operations activities by monitoring alerts, reviewing security events, researching potential threats, documenting findings, and contributing to incident response and threat mitigation efforts under the guidance of experienced security professionals
• Collaborate with CISO teams, technology partners, infrastructure teams, application developers, and risk stakeholders to strengthen security controls and support internal policy, regulatory, audit, and governance expectations
• Help prepare security documentation, metrics, dashboards, procedures, job aids, and status updates that communicate risks, findings, remediation progress, and key outcomes to technical and non-technical audiences
• Support vulnerability management, access management, security awareness, compliance, and control testing activities by collecting data, analyzing results, tracking actions, and helping teams drive timely remediation
• Research emerging cybersecurity threats, industry trends, financial services security practices, and security technologies while contributing to projects that protect critical financial market infrastructure

What they're looking for:

• Currently pursuing a bachelor's degree in Cybersecurity, Information Security, Computer Science, Information Technology, Computer Engineering, Management Information Systems (MIS), Technology Management, or a related field
• Expected graduation date: Fall 2027 or Summer 2028
• Minimum GPA: 3.2
• Authorization to work permanently in the United States without current or future sponsorship
• Foundational understanding of cybersecurity concepts and frameworks, IT risk, networking, cloud, operating systems, identity and access management, vulnerability management, or security governance
• Coursework, projects, prior work, internship, student organization, volunteer, or leadership experience related to cybersecurity, information security, IT risk, audit, compliance, technology operations, or financial services technology
• Strong interest in cybersecurity, financial services, critical infrastructure, technology risk, operational resilience, or protecting systems and data in a highly regulated environment
• Exposure to tools, topics, or frameworks such as SIEM platforms, vulnerability scanning, endpoint security, cloud security, scripting or automation, data analysis, Microsoft Office 365, Excel, PowerPoint, Power BI, ServiceNow, Jira, NIST Cybersecurity Framework, ISO 27001, SOC, or security awareness practices
• Curiosity, initiative, and willingness to ask questions
• Strong communication, organization, and follow-through
• Analytical thinking and attention to detail
• Ability to use feedback and adapt as you learn

Benefits:

• Hybrid work model: 3 days in office and 2 days remote, based on team schedule.