Remote IT Risk Analyst Intern - Summer 2027

Symetra; Bellevue (WA); Remote; USD 30,000 - 34,000; Full time

Benefits offered by this job

Fully remote internship

Hands-on risk/security projects

Mentor sessions with senior leaders

Intern networking opportunities

Job summary

Symetra is offering an IT Risk Analyst Internship for Summer 2027. This fully remote (with optional office) 12-week program provides hands-on experience in IT risk management, cybersecurity governance, audit, and third-party risk.

You’ll collaborate with Information Security, IT, Audit Services, Procurement, and business teams to identify risks and improve controls. The role emphasizes learning through real projects, exposure to leadership, and the chance to develop skills in risk documentation,

Qualifications

• Bachelor’s degree in progress or recently completed in information systems, cybersecurity, computer science, accounting, business, risk management, or a related field.
• Interest in IT risk management, information security, cybersecurity governance, audit, compliance, or third-party risk management.
• Beginner-to-intermediate proficiency with Microsoft Excel, PowerPoint, Word, and other Microsoft Office applications.
• Strong analytical, problem-solving, written communication, and verbal communication skills.
• Strong organizational skills and attention to detail, with the ability to manage multiple assignments and meet deadlines.
• Ability to work independently while collaborating effectively with team members and stakeholders across different business areas.
• Familiarity with internal controls, ISO 27001, SOX IT General Controls, SOC reports, or other risk and security frameworks through coursework, projects, or prior experience is preferred but not required.

Responsibilities

• Assist with IT risk management activities, including researching risks, documenting assessments, maintaining risk records, and tracking mitigation efforts.
• Support IT audit and compliance activities related to frameworks and requirements such as ISO 27001 and Sarbanes-Oxley IT General Controls.
• Help gather, organize, and review documentation and evidence used to demonstrate that security and technology controls are operating effectively.
• Assist with third-party technology risk reviews by analyzing security questionnaires, SOC reports, ISO 27001 certifications, penetration-testing results, and other vendor documentation.
• Work with IT, Information Security, Audit Services, Procurement, and business stakeholders to track requests, findings, and remediation activities.
• Help prepare reports, dashboards, and presentations that communicate risk, audit, compliance, and remediation information to stakeholders and leadership.
• Research emerging cybersecurity threats, technologies, regulatory developments, and industry practices that could affect Symetra.
• Support improvements to risk management processes, procedures, tools, and documentation.
• Participate in team meetings and contribute ideas while learning how technology and security risks are managed within a financial services organization.

Skills

Microsoft Excel

PowerPoint

Word

Microsoft Office

Education

Bachelor's degree in progress or recently completed in information systems, cybersecurity, computer science, accounting, business, risk management, or a related field

Job description

Symetra is offering an IT Risk Analyst Internship for Summer 2027. This fully remote (with optional office) 12-week program provides hands-on experience in IT risk management, cybersecurity governance, audit, and third-party risk.

You’ll collaborate with Information Security, IT, Audit Services, Procurement, and business teams to identify risks and improve controls. The role emphasizes learning through real projects, exposure to leadership, and the chance to develop skills in risk documentation,