Summer 2027 IT Audit Undergraduate Intern

highmarkhealth; Pennsylvania; On-site; USD 25,000 - 36,000; Full time

Job summary

Highmark Health in Pennsylvania offers a Summer 2027 Undergraduate IT Audit Internship providing hands-on experience across IT audit, cybersecurity, data privacy, risk management, and governance.

Interns work with IT Audit, Information Security, Privacy, Risk Management teams to assess controls, support audit execution, and learn regulatory compliance. The program emphasizes exposure to enterprise IT risk assessment, system implementations, and advisory services.

Qualifications

• Full or part-time enrollment in an accredited college or university baccalaureate program.

Responsibilities

• Support day-to-day IT audit activities and engagements.
• Assist with assessing technology and security risks and control effectiveness.
• Document audit results and develop recommendations for process improvements.
• Collaborate with stakeholders across the organization on IT risk governance.

Skills

IT Audit

Cybersecurity

Data Privacy

Risk Management

Governance

Education

Bachelor's degree in a relevant field

Job description

Company : Highmark Health Job Description :

Applicants must be authorized to work in the U.S. independently. At this time, we do not offer visa sponsorship for this role.

The Summer 2027 Undergraduate IT Audit Internship provides students with an opportunity to gain practical, hands-on experience supporting information technology audit, cybersecurity, data privacy, risk management, and governance activities across Highmark Health and its subsidiaries. This internship is designed to develop the next generation of diverse business and technology professionals through direct exposure to enterprise IT risk assessment, information security controls, system implementations, compliance processes, and audit execution.

As a member of the Internal Audit team, the intern will work alongside IT Audit, Information Security, Privacy, Risk Management, and business professionals to evaluate the effectiveness of controls designed to protect organizational assets, sensitive information, and critical business systems. Participants will gain valuable insight into how organizations identify, assess, and manage information technology and cybersecurity risks while ensuring compliance with regulatory requirements, industry standards, and internal policies.

The program provides hands-on training and experience in information technology auditing, risk assessment, data privacy, cybersecurity governance, and advisory services. Interns will assist with evaluating technology-related processes and controls to determine whether risks are appropriately identified and managed and whether financial, operational, and protected information is secure, accurate, reliable, and processed in a timely manner. Participants will also gain exposure to system implementation reviews, project management controls, and audit methodologies while contributing to meaningful projects that support the organization's overall risk management objectives.

Typical responsibilities include supporting day-to-day audit activities, participating in IT assurance and advisory engagements, assessing technology and security risks, performing research and analysis, documenting audit results, developing recommendations for process improvements, and collaborating with stakeholders across the organization. Interns will also gain experience working in highly regulated environments that require adherence to data privacy, information security, and HIPAA requirements.

SUMMARY OF JOB RESPONSIBILITIES

This job has the goal of providing the opportunity to acquire practical experience through direct exposure to the related business line(s) and to develop the next generation of diverse business professionals. To that end, the program will provide hands-on training and experience in the business line, expose the various career opportunities in the business line and related areas, and prepare participants for positions in the business.

Typical responsibilities include, providing services to the day-to-day operating objectives of the assigned area, participating in projects and programs appropriate to the needs of the assigned area, participating in the planning and implementation of projects and initiatives, conducting research and reporting including recommendations or proposals for action.

REQUIRED QUALIFICATIONS

Full or part-time enrollment in an accredited college or university baccalaureate program.

PREFERRED QUALIFICATIONS

Pursuing a degree in Accounting, Finance, Business Administration, Information Technology, Computer Science, Cybersecurity, Information Systems , or a related field.

ESSENTIAL JOB FUNCTIONS

1. Communicate effectively while interacting directly with colleagues, clientele, and/or other internal or external constituencies in the planning of assignments and the resolution of day-to-day operational problems.
2. Under supervision, provide entry-level professional services as appropriate to the day-to-day operating objectives of the area. Receives guidance, training, and mentoring from senior personnel in planning and carrying out activities and assignments.
3. Undertake and/or participates in projects and programs designed to develop professional skills and expertise appropriate to the needs of the organization.
4. Participate in the planning and implementation of unit projects and initiatives within area of expertise and ability.
5. As specifically requested by management, conduct research and reporting inclusive of recommendations or alternative proposals for action.
6. Undertake related studies or enrichment programs as appropriate to the specific objectives of the operating unit.
7. Perform miscellaneous job-related duties as assigned.

Disclaimer: The job description has been designed to indicate the general nature and essential duties and responsibilities of work performed by employees within this job title. It may not contain a comprehensive inventory of all duties, responsibilities, and qualifications required of employees to do this job.

Complian