TRC Winter Internship - West Des Moines

JOB SUMMARYUHY is seeking an intern to join our Technology, Risk, and Compliance (TRC) practice. This internship provides an opportunity to gain hands-on experience supporting client engagements involving cybersecurity risk assessments, compliance reviews, control evaluations, and selected technical security testing activities. The intern will work with professionals across a variety of industries and will assist in delivering services aligned to recognized cybersecurity frameworks and standards, including NIST Cybersecurity Framework (CSF), NIST SP 800-53, NIST SP 800-171, CMMC, and PCI DSS.This

position is well suited for a candidate interested in cybersecurity consulting, risk and control assessment, compliance advisory, and professional services within an accounting and advisory firm environment.

JOB DESCRIPTION Essential functions

Assist with technology and cybersecurity risk assessments and advisory engagements for clients in various industries

Support evaluation of client environments against established frameworks, standards, and control requirements

Review and organize client-provided documentation, including policies, procedures, system inventories, diagrams, and evidence

Help document assessment results, observations, risks, and recommendations in a clear, accurate, and professional manner

Perform research on cybersecurity requirements, industry practices, and applicable regulatory or framework expectations

Support mapping of controls and requirements across frameworks such as NIST CSF, NIST 800-53, NIST 800-171, CMMC, and PCI DSSAssist with vulnerability assessments and limited penetration testing activities under the supervision of senior team members

Participate in client interviews, walkthroughs, and internal team discussions, as appropriate

Prepare and maintain engagement work papers, status trackers, spreadsheets, and presentation materials

Support internal practice development activities, including methodology enhancement, template creation, and knowledge-sharing initiatives

Perform other duties as assigned

Supervisory responsibilities

NoneWork environment

Work is conducted in a professional office environment with minimal distractions

Physical demands

Prolonged periods of sitting at a desk and performing work in front of a computer screen for long periods of time

Must be able to lift up to 15 pounds at a time Travel required

Travel may be frequent and unpredictable, depending on client’s needs

Required education and experience0 – 1 year of relevant experience

Currently pursuing a bachelor’s or master’s degree in information systems, information technology, computer science, accounting Information Systems, cybersecurity or a related field

Basic understanding of cybersecurity principles, including access control, vulnerability management, networking, endpoint security, and security best practices

Strong written and verbal communication skills

Strong organizational skills and attention to detail

Ability to handle sensitive and confidential information with professionalism and discretion

Proficiency in Microsoft Office applications, including Word, Excel, and Power Point Ability  to work both independently and collaboratively in a team environment

Preferred education and experience

Familiarity with one or more cybersecurity frameworks or standards, such as NIST CSF, NIST 800-53, NIST 800-171, CMMC, CIS Controls, or PCI DSSExposure to cybersecurity assessment, audit, or compliance concepts through coursework, labs, projects, or prior internship experience

Foundational knowledge of vulnerability scanning, system hardening, cloud security, or basic penetration testing concepts

Interest in consulting, advisory services, audit, or risk management

Other duties

Please note this job description is not…