Intern, Information Security Risk and Compliance

Sony; New York (NY); On-site; USD 28,000 - 39,000; Part time

Benefits offered by this job

None

Job summary

Sony Corporation of America in New York, NY, seeks an Intern in Information Security Risk and Compliance to join the GRC team. The role offers hands-on experience across risk domains and governance, helping to shape a security-first culture.

The internship pays $24.00 per hour, with overtime eligibility. Applicants must be authorized to work in the USA and are expected to develop awareness materials and reports on risk findings.

Qualifications

• Current student pursuing a bachelor's degree in Cybersecurity, Computer Science, Information Security, or a related field.
• Working knowledge of regulatory frameworks (ISO 27001, NIST, PCI DSS) beneficial.
• Working knowledge of GRC tools such as RSA Archer a plus.
• Familiarity with cybersecurity best practices, and ability/interest in creating engaging awareness materials.
• Excellent writing skills with a proven ability to write clear, unambiguous instructions.
• Demonstrated strong analytical, problem-solving skills, and attention to detail are essential.
• All candidates must be authorized to work in the USA.

Responsibilities

• Provide day-to-day operational and administrative support to the Governance, Risk, and Compliance (GRC) function within the program.
• Support risk assessment of prospective third parties to evaluate their security posture and compliance practices.
• Assist in preparing detailed reports on risk findings and security gaps following third-party risk assessment.
• Assist in maintaining third-party asset inventory in the GRC tool.
• Contribute to the development and improvement of third-party risk management processes.
• Participate in the creation and delivery of information security awareness, training, and education program materials.

Skills

Risk assessment

GRC processes

Regulatory knowledge

ISO 27001

NIST

PCI DSS

RSA Archer

Cybersecurity writing

Analytical thinking

Attention to detail

Education

Bachelors in Cybersecurity/InfoSec

Tools

RSA Archer

Job description

Sony Corporation of America, located in New York, NY, is the U.S. headquarters of Sony Group Corporation, based in Tokyo, Japan. Sony's principal U.S. businesses include Sony Electronics Inc., Sony Interactive Entertainment LLC, Sony Music Entertainment, Sony Music Publishing and Sony Pictures Entertainment Inc. With some 900 million Sony devices in hands and homes worldwide today, a vast array of Sony movies, television shows and music, and the PlayStation Network, Sony creates and delivers more entertainment experiences to more people than anyone else on earth. To learn more: www.sony.com/en.

Position Summary

Sony Corporation of America (SCA) is seeking an Intern, Information Security Risk and Compliance, to join the Information Security Department located in New York City. This position will report to the Manager, Information Security, and be a part of the team responsible for securing Sony’s information assets and continually enhancing SCA’s Information Security program. This internship is a great opportunity to get hands on experience across risk domains, help shape the future of security governance, and contribute to fostering a security-first culture.

Responsibilities

• Provide day-to-day operational and administrative support to the Governance, Risk, and Compliance (GRC) function within the program.
• Support risk assessment of prospective third parties to evaluate their security posture and compliance practices.
• Assist in preparing detailed reports on risk findings and security gaps following third-party risk assessment.
• Assist in maintaining third-party asset inventory in the GRC tool.
• Contribute to the development and improvement of third-party risk management processes.
• Participate in the creation and delivery of information security awareness, training, and education program materials.

Qualifications

• Current student pursuing a bachelor's degree in Cybersecurity, Computer Science, Information Security, or a related field.
• Working knowledge of regulatory frameworks (ISO 27001, NIST, PCI DSS) beneficial.
• Working knowledge of GRC tools such as RSA Archer a plus.
• Familiarity with cybersecurity best practices, and ability/interest in creating engaging awareness materials.
• Excellent writing skills with a proven ability to write clear, unambiguous instructions.
• Demonstrated strong analytical, problem-solving skills, and attention to detail are essential.
• All candidates must be authorized to work in the USA.

The target hourly rate for this internship is $24.00 per hour. The individual will be paid hourly and eligible for overtime.

All qualified applicants will receive consideration for employment without regard to any basis protected by applicable federal, state, or local law, ordinance, or regulation.

Disability Accommodation for Applicants to Sony Corporation of America

Sony Corporation of America provides reasonable accommodation for qualified individuals with disabilities and disabled veterans in job application procedures. For reasonable accommodation requests, please contact us by email at [e-mail] or by mail to: Sony Corporation of America, People Experience Department, 25 Madison Avenue, New York, NY 10010. Please indicate the position you are applying for.

Right to Work (English/Spanish)

E-Verify Participation (English/Spanish)