2027 TRC Winter Internship - West Des Moines

UHY LLP; West Des Moines (IA); On-site; USD 20,664,000 - 30,307,000; Part time

Benefits offered by this job

Health insurance

Dental and vision coverage

401(k) retirement plans

Paid time off (PTO)

Job summary

UHY LLP is seeking an intern to join our Technology, Risk, and Compliance (TRC) practice in Iowa. You will support cybersecurity risk assessments, compliance reviews, and control evaluations for clients across diverse industries, under supervision.

The role offers exposure to NIST CSF, 800-53, 800-171, CMMC, and PCI DSS within a professional services environment. The internship emphasizes learning, collaboration, and practical security testing activities, with opportunities to contribute to

Qualifications

• 0–1 year of relevant experience.
• Basic understanding of cybersecurity principles, including access control, vulnerability management, networking, endpoint security, and best practices.
• Proficiency in Microsoft Office, especially Word, Excel, and PowerPoint.

Responsibilities

• Assist with technology and cybersecurity risk assessments for clients across industries.
• Support evaluation of client environments against frameworks and control requirements.
• Review and organize client documentation (policies, procedures, inventories, evidence).
• Document assessment results, risks, and recommendations clearly and professionally.

Skills

Communication skills

Microsoft Office

Cybersecurity basics

Team player

Discretion

Education

Enrolled in information systems/IT program

Job description

JOB SUMMARYUHY is seeking an intern to join our Technology, Risk, and Compliance (TRC) practice. This internship provides an opportunity to gain hands-on experience supporting client engagements involving cybersecurity risk assessments, compliance reviews, control evaluations, and selected technical security testing activities. The intern will work with professionals across a variety of industries and will assist in delivering services aligned to recognized cybersecurity frameworks and standards, including NIST Cybersecurity Framework (CSF), NIST SP 800-53, NIST SP 800-171, CMMC, and PCI DSS.This position is well suited for a candidate interested in cybersecurity consulting, risk and control assessment, compliance advisory, and professional services within an accounting and advisory firm environment.JOB DESCRIPTIONEssential functionsAssist with technology and cybersecurity risk assessments and advisory engagements for clients in various industriesSupport evaluation of client environments against established frameworks, standards, and control requirementsReview and organize client-provided documentation, including policies, procedures, system inventories, diagrams, and evidenceHelp document assessment results, observations, risks, and recommendations in a clear, accurate, and professional mannerPerform research on cybersecurity requirements, industry practices, and applicable regulatory or framework expectationsSupport mapping of controls and requirements across frameworks such as NIST CSF, NIST 800-53, NIST 800-171, CMMC, and PCI DSSAssist with vulnerability assessments and limited penetration testing activities under the supervision of senior team membersParticipate in client interviews, walkthroughs, and internal team discussions, as appropriatePrepare and maintain engagement workpapers, status trackers, spreadsheets, and presentation materialsSupport internal practice development activities, including methodology enhancement, template creation, and knowledge-sharing initiativesPerform other duties as assignedSupervisory responsibilitiesNoneWork environmentWork is conducted in a professional office environment with minimal distractionsPhysical demandsProlonged periods of sitting at a desk and performing work in front of a computer screen for long periods of timeMust be able to lift up to 15 pounds at a timeTravel requiredTravel may be frequent and unpredictable, depending on client’s needsRequired education and experience0 – 1 year of relevant experienceCurrently pursuing a bachelor’s or master’s degree in information systems, information technology, computer science, accounting Information Systems, cybersecurity or a related fieldBasic understanding of cybersecurity principles, including access control, vulnerability management, networking, endpoint security, and security best practicesStrong written and verbal communication skillsStrong organizational skills and attention to detailAbility to handle sensitive and confidential information with professionalism and discretionProficiency in Microsoft Office applications, including Word, Excel, and PowerPointAbility to work both independently and collaboratively in a team environmentPreferred education and experienceFamiliarity with one or more cybersecurity frameworks or standards, such as NIST CSF, NIST 800-53, NIST 800-171, CMMC, CIS Controls, or PCI DSSExposure to cybersecurity assessment, audit, or compliance concepts through coursework, labs, projects, or prior internship experienceFoundational knowledge of vulnerability scanning, system hardening, cloud security, or basic penetration testing conceptsInterest in consulting, advisory services, audit, or risk managementOther dutiesPlease note this job description is not designed to cover or contain a comprehensive listing of activities, duties or responsibilities that are required of the colleague for this job. Duties, responsibilities and activities may change at any time with or without notice.WHO WE AREUHY is one of the nation’s largest professional services firms providing audit, tax, consulting and advisory services to clients primarily in the dynamic middle market. We are trailblazers who bring our experience from working within numerous industries to our clients so that we can provide them with a 360-degree view of their businesses. Together with our clients, UHY works collaboratively to develop flexible, innovative solutions that meet our clients’ business challenges. As an independent member of UHY International, we are proud to be a part of a top 20 international network of independent accounting and consulting firms.WHAT WE OFFERPOSITIVE WORK ENVIRONMENTEnjoy a collaborative and supportive work environment where teamwork is valued.ATTRACTIVE COMPENSATION PACKAGESOur compensation is competitive and tailored to reflect the role, qualifications, and expertise of each individual.COMPREHENSIVE BENEFIT PACKAGEAccess comprehensive benefits including group health insurance, dental and vision coverage, 401(k) retirement plans, and generous paid time off (PTO) allowances.