Technology Risk and Compliance (TRC) Intern

Job Description

2027 TRC Fall Internship | UHY-US

The Tone:
This is a temporary, less than six-month internship at UHY-US, one of the nation’s largest professional services firms. The company provides audit, tax, consulting, and advisory services, primarily to clients in the dynamic middle market. This role is crucial for helping clients identify and mitigate their technology and cybersecurity risks through various IT risk and control frameworks. Interns will contribute directly to assessing IT risks and testing control effectiveness, working alongside IT Audit Managers.

The TL;DR
• Role: Internship
• Type: Temporary, less than six (6) months
• Location: Professional Office Environment (travel required)

• Team: Technology Risk and Compliance (TRC) team, reporting to IT Audit Managers
• Mission: Help clients understand and mitigate their technology and cybersecurity risks.
• Tech Stack: SOC 1®, SOC 2®, PCI, ISO, HIPAA, FFIEC, NIST, CIS Security

What You’ll Actually Do
• IT Control Attestations: Gain an understanding of client IT systems, infrastructure, and control environment to apply various IT risk and control frameworks.
• IT Risk Assessments: Participate directly in assessing diverse IT risks for clients and stakeholders, developing various types of reports and presentations on findings.
• Controls Testing: Evaluate the effectiveness of IT controls by understanding and executing the best way to test their operation.
• Documentation: Learn to accurately record the procedures performed, the results of control testing, and the conclusions reached during assessments.
• Administration: Track time diligently and maintain designated chargeable hours as expected for the role.

The Must-Haves
• Background: Actively pursuing a bachelor’s degree in accounting, information systems, or a similar field, coupled with an interest in information technology. High School Diploma or GED or High School equivalent certificate is required.
• Experience: 0-1 year of relevant experience.
• Skills: Understanding of IT systems, infrastructure, and control environments; ability to apply IT risk and control frameworks (e.g., SOC, PCI, HIPAA, ISO, FFIEC, NIST, CIS Security); proficiency in assessing IT risks and developing reports; capability to evaluate and test the effectiveness of controls; strong documentation skills.
• Bonus: Cumulative GPA of 3.0 or higher; prior experience with IT systems.