IT Risk Analyst Internship

Symetra; United States; Remote; USD 30,000 - 34,000; Full time

Benefits offered by this job

Fully remote internship

Equipment provided

Hands-on risk experience

Senior leadership interaction

Job summary

Symetra is seeking an IT Risk Analyst Intern to join our Information Security team for a 12-week summer 2027 program. This fully remote internship may include an office option for local candidates, and provides hands‑on exposure to IT risk management, cybersecurity governance, audit/compliance, and third‑party risk management.

You will collaborate with IT, Information Security, Audit Services, Procurement, and business stakeholders to identify risks, review controls, and support remediation.

Qualifications

• Bachelor's degree in progress or recently completed in information systems, cybersecurity, computer science, accounting, business, risk management, or a related field.
• Beginner-to-intermediate proficiency with Microsoft Excel, PowerPoint, Word, and other Microsoft Office applications.
• Strong analytical, problem-solving, written communication, and verbal communication skills.
• Strong organizational skills and attention to detail, with the ability to manage multiple assignments and meet deadlines.
• Ability to work independently while collaborating effectively with team members and stakeholders across different business areas.
• Familiarity with internal controls, ISO 27001, SOX IT General Controls, SOC reports, or other risk and security frameworks through coursework, projects, or prior experience is preferred but not required.

Responsibilities

• Assist with IT risk management activities, including researching risks, documenting assessments, maintaining risk records, and tracking mitigation efforts.
• Support IT audit and compliance activities related to ISO 27001 and Sarbanes‑Oxley IT General Controls.
• Help gather, organize, and review documentation and evidence to demonstrate controls are operating effectively.
• Assist with third‑party technology risk reviews by analyzing security questionnaires and SOC reports.
• Work with IT, Information Security, Audit Services, Procurement, and stakeholders to track requests, findings, and remediation activities.
• Help prepare reports, dashboards, and presentations communicating risk, audit, compliance, and remediation information to stakeholders and leadership.
• Research emerging cybersecurity threats, technologies, regulatory developments, and industry practices that could affect Symetra.
• Support improvements to risk management processes, procedures, tools, and documentation.
• Participate in team meetings and contribute ideas while learning how technology and security risks are managed in a financial services organization.

Skills

Excel

PowerPoint

Word

Analytical skills

Organizational skills

Independent work

Education

Bachelor's degree in progress or recently completed

Job description

About the role

Symetra has an exciting opportunity to join our Information Security team as an IT Risk Analyst Intern!

The IT Risk Analyst Internship is a full‑time, paid internship taking place in summer 2027. This internship is 100% remote, with the option to work from a Symetra office if local. During this 12‑week program, you will work alongside experienced information security and risk professionals , and gain practical exposure to IT risk management, cybersecurity governance, audit and compliance, and third‑party risk management.

You will have the opportunity to contribute to meaningful projects that help Symetra identify technology risks, evaluate security controls, support regulatory and audit requirements, and strengthen the companys overall risk posture. Through hands‑on assignments and collaboration with teams across Information Security, IT, Audit Services, Procurement, and the business, you will build valuable skills for a career in IT risk, cybersecurity, audit, or compliance.

At Symetra, we seek to engage and empower every individual. We value collaboration, diversity of thought and experience, sharing ideas, winning as a team, and always striving for excellence. We provide sessions for interns to learn from and engage with senior leadership while building community as a group.

What you will do

• Assist with IT risk management activities, including researching risks, documenting assessments, maintaining risk records, and tracking mitigation efforts.
• Support IT audit and compliance activities related to frameworks and requirements such as ISO 27001 and Sarbanes‑Oxley IT General Controls.
• Help gather, organize, and review documentation and evidence used to demonstrate that security and technology controls are operating effectively.
• Assist with third‑party technology risk reviews by analyzing security questionnaires, SOC reports, ISO 27001 certifications, penetration‑testing results, and other vendor documentation.
• Work with IT, Information Security, Audit Services, Procurement, and business stakeholders to track requests, findings, and remediation activities.
• Help prepare reports, dashboards, and presentations that communicate risk, audit, compliance, and remediation information to stakeholders and leadership.
• Research emerging cybersecurity threats, technologies, regulatory developments, and industry practices that could affect Symetra.
• Support improvements to risk management processes, procedures, tools, and documentation.
• Participate in team meetings and contribute ideas while learning how technology and security risks are managed within a financial services organization.

Your education, experience, and skills

• Bachelors degree in progress or recently completed in information systems, cybersecurity, computer science, accounting, business, risk management, or a related field.
• Interest in IT risk management, information security, cybersecurity governance, audit, compliance, or third‑party risk management.
• Beginner‑to‑intermediate proficiency with Microsoft Excel, PowerPoint, Word, and other Microsoft Office applications.
• Strong analytical, problem‑solving, written communication, and verbal communication skills.
• Strong organizational skills and attention to detail, with the ability to manage multiple assignments and meet deadlines.
• Ability to work independently while collaborating effectively with team members and stakeholders across different business areas.
• Familiarity with internal controls, ISO 27001, SOX IT General Controls, SOC reports, or other risk and security frameworks through coursework, projects, or prior experience is preferred but not required .

What we offer you

• A fully remote internship. We ship you the equipment you need to enjoy working from the comfort of home.
• Hands‑on experience supporting real‑world IT risk, cybersecurity, audit, and compliance initiatives.
• Opportunities to learn from experienced risk and security professionals and collaborate with teams across the organization.
• Sessions with senior leaders and opportunities to connect with other interns throughout the program.

Compensation:

Hourly Range: $22.00-$25.00

Work Authorization

Employer work visa sponsorship and support are not provided for this role. Applicants must be currently authorized to work in the United States and must maintain authorization to work in the United States throughout their employment with our company.

Please review Symetra's Remote Network Minimum Requirements:

• Minimum Internet Speed: 100 Mbps download and 20 Mbps upload, in alignment with the FCC's definition of "broadband."
• Internet Type: Fiber, Cable (e.g., Comcast, Spectrum), or DSL.
• Not Permissible: Satellite (e.g., Starlink), cellular broadband (hotspot or otherwise), any other wireless technology, or wired dial-up.

When applying to jobs at Symetra you'll be asked to test your internet speed and confirm that your internet connection meets or exceeds Symetra's standard as outlined above.

Identity Verification

Symetra is committed to fair and secure hiring practices. For all roles, candidates will be required (after the initial phone screen) to be on video for all interviews . Symetra will take affirmative steps at key points in the process to verify that a candidate is not seeking employment fraudulently, e.g. through use of a false identity.

Failure to comply with verification procedures may result in:

• Disqualification from the recruitment process
• Withdrawal of a job offer
• Termination of employment and other criminal and/or civil remedies, if fraud is discovered

We empower inclusion

At Symetra, we aspire to be the most inclusive insurance company in the country. Were building a place where every employee feels valued, respected, and has opportunities to contribute.

Inclusion is about recognizing our assumptions, considering multiple perspective , and removing barriers. We accept and celebrate diverse experiences, identities, and perspectives, because lifting each other up fuels thought and builds a stronger, more innovative company. We invite you to learn more about our efforts here .

Creating a world where more people have access to financial freedom

Symetra is a national financial services company dedicated to helping people achieve their financial goals and feel confident about the future. In our daily work, were guided by the principles of Value, Transparency and Sustainability. This means we provide products and services people need at a competitive price, we communicate clearly and openly so people understand what theyre buying, and we design products—and operate our company—to stand the test of time. Were committed to showing up for our communities, lifting up our employees, and standing up for diversity, equity and inclusion (DEI). Join our team and help us create a world where more people have access to financial freedom.

F or more information about our careers visit: https://symetra.eightfold.ai/careers

#LI-CM1

#LI-REMOTE