IT Risk Analyst Internship

Symetra has an exciting opportunity to join our Information Security team as an IT Risk Analyst Intern!

The IT Risk Analyst Internship is a full-time, paid internship taking place in summer 2027. This internship is 100% remote, with the option to work from a Symetra office if local. During this 12-week program, you will work alongside experienced information security and risk professionals, and gain practical exposure to IT risk management, cybersecurity governance, audit and compliance, and third-party risk management.

You will have the opportunity to contribute to meaningful projects that help Symetra identify technology risks, evaluate security controls, support regulatory and audit requirements, and strengthen the company's overall risk posture. Through hands-on assignments and collaboration with teams across Information Security, IT, Audit Services, Procurement, and the business, you will build valuable skills for a career in IT risk, cybersecurity, audit, or compliance.

At Symetra, we seek to engage and empower every individual. We value collaboration, diversity of thought and experience, sharing ideas, winning as a team, and always striving for excellence. We provide sessions for interns to learn from and engage with senior leadership while building community as a group.

• Assist with IT risk management activities, including researching risks, documenting assessments, maintaining risk records, and tracking mitigation efforts.
• Support IT audit and compliance activities related to frameworks and requirements such as ISO 27001 and Sarbanes-Oxley IT General Controls.
• Help gather, organize, and review documentation and evidence used to demonstrate that security and technology controls are operating effectively.
• Assist with third-party technology risk reviews by analyzing security questionnaires, SOC reports, ISO 27001 certifications, penetration-testing results, and other vendor documentation.
• Work with IT, Information Security, Audit Services, Procurement, and business stakeholders to track requests, findings, and remediation activities.
• Help prepare reports, dashboards, and presentations that communicate risk, audit, compliance, and remediation information to stakeholders and leadership.
• Research emerging cybersecurity threats, technologies, regulatory developments, and industry practices that could affect Symetra.
• Support improvements to risk management processes, procedures, tools, and documentation.
• Participate in team meetings and contribute ideas while learning how technology and security risks are managed within a financial services organization.

• Bachelor's degree in progress or recently completed in information systems, cybersecurity, computer science, accounting, business, risk management, or a related field.
• Interest in IT risk management, information security, cybersecurity governance, audit, compliance, or third-party risk management.
• Beginner-to-intermediate proficiency with Microsoft Excel, PowerPoint, Word, and other Microsoft Office applications.
• Strong analytical, problem-solving, written communication, and verbal communication skills.
• Strong organizational skills and attention to detail, with the ability to manage multiple assignments and meet deadlines.
• Ability to work independently while collaborating effectively with team members and stakeholders across different business areas.
• Familiarity with internal controls, ISO 27001, SOX IT General Controls, SOC reports, or other risk and security frameworks through coursework, projects, or prior experience is preferred but not required.

• A fully remote internship. We ship you the equipment you need to enjoy working from the comfort of home.
• Hands-on experience supporting real-world IT risk, cybersecurity, audit, and compliance initiatives.
• Opportunities to learn from experienced risk and security professionals and collaborate with teams across the organization.
• Sessions with senior leaders and opportunities to connect with other interns throughout the program.

Hourly Range: $22.00-$25.00

Employer work visa sponsorship and support are not provided for this role. Applicants must be currently authorized to work in the United States and must maintain authorization to work in the United States throughout their employment with our company.

As a remote-first organization committed to providing a positive…