Controls / Compliance Tester Intern 2027

This internship provides an excellent opportunity to gain practical experience in internal controls, regulatory compliance, risk management, cybersecurity governance, and audit support within a complex business environment. The Controls & Compliance Tester Intern will support the organization's compliance, risk management, and internal controls programs by assisting with the evaluation and testing of operational, security, and business controls. This role offers hands-on experience in governance, risk, compliance (GRC), audit readiness, and process improvement initiatives. The intern will work closely with compliance professionals, control owners, and subject matter experts to help assess control effectiveness, document evidence, and identify opportunities for strengthening business processes. Strong analytical and problem-solving abilities. Ability to organize information and maintain attention to detail. Demonstrated curiosity and willingness to learn complex business processes. Ability to work independently while seeking guidance when appropriate. Understanding of risk management, compliance, audit, or internal controls concepts. Experience analyzing data and identifying trends. Basic understanding of information security, cybersecurity, or technology governance principles. Knowledge of control frameworks such as: NIST Cybersecurity Framework (CSF), NIST 800-53, ISO 27001, SOC 2, COBIT, COSO Internal Control Framework. Familiarity with governance, risk, and compliance (GRC) tools is a plus. United States Enterprise Operations Internship Yorktown Heights, US Yorktown Heights (0147) International Business Machines Corporation Control Objectives for Information and Related Technologies Committee of Sponsoring Organizations Framework Governance, Risk and Compliance Information Security Internal Controls National Institute of Standards and Technology Risk Management Cybersecurity Detail-oriented Curiosity Audit Compliance Security Operations Center Risk Governance International Organization for Standardization Technology Control Framework ConfigServer Security and Firewall