Summer Associate Internship (Technical Risk Analyst - Security)

Navy Federal Credit Union is offering a 12-week Summer Associate internship focused on technical risk and security. The intern will support risk and control assessments, security control testing, data analysis, governance reporting, process modernization, and regulatory research.

What you'll do:

• Support Risk & Control Identification and Assessment (RCIA) workshops and RCSA activities by documenting process information, risks, controls, and assessment outcomes
• Assist with the review and analysis of process documentation, narratives, procedures, and process maps to identify potential risks and control opportunities
• Participate in security control testing activities by collecting, organizing, and reviewing evidence under the supervision of testing personnel. Assist with documenting test procedures, test results, observations, and supporting workpapers
• Perform data analysis and validation to support risk assessments, control evaluations, and reporting activities
• Support the maintenance of risk and control inventories within governance, risk, and compliance (GRC) systems
• Assist with tracking action items, issues, remediation efforts, and testing milestones
• Create executive-ready summaries, presentations, and status reporting materials for management review
• Research regulatory requirements, industry standards, and leading practices related to operational risk, information security, and controls management
• Collaborate with risk managers, control testers, process owners, and business stakeholders to support ongoing assessment and governance activities
• Participate in team meetings, project discussions, and training opportunities to gain exposure to enterprise risk management practices
• Perform other duties as assigned

What they're looking for:

• To qualify for this position, applicants must be currently pursuing a degree from an accredited college or university and have an anticipated graduation date of December 2027 or later
• Currently enrolled in an accredited college or university pursuing a Bachelor's or Master's degree in: Information Security/Cybersecurity, Computer Information Systems, Information Technology, Risk Management, Accounting, or a related field
• Strong analytical and problem-solving skills
• Effective verbal and written communication skills
• Ability to gather, organize, and analyze information from multiple sources
• Proficiency with Microsoft Office products, including Excel, Word, PowerPoint, and Teams
• Coursework or experience in risk management, audit, compliance, cybersecurity, information assurance, or internal controls
• Familiarity with risk assessment frameworks or control frameworks such as NIST, FFIEC, ISO 27001, COBIT, or COSO
• Experience using data analysis tools such as Excel, Power BI, SQL, or similar technologies
• Understanding of governance, risk, and compliance (GRC) concepts
• Interest in pursuing careers in cybersecurity, risk management, internal audit, compliance, or security governance

Benefits:

• Hybrid workplace arrangement