Technology Risk and Compliance (TRC) Intern

Job Description

2027 TRC Fall Internship | UHY-US

The Tone:
This is a temporary, less than six-month internship with UHY-US, a professional services firm with a focus on audit, tax, consulting, and advisory services. UHY is one of the nation’s largest firms in its sector and an independent member of a top 20 international network. This internship is crucial for helping clients understand and mitigate their technology and cybersecurity risks, involving exposure to various IT risk and control frameworks and direct client interaction.

The TL;DR
• Role: Internship
• Type: Temporary
• Location: In-person with travel

• Team: TRC team, working directly with IT Audit Managers
• Mission: Help clients understand and mitigate their technology and cybersecurity risks.
• Tech Stack: SOC 1®, SOC 2®, PCI, ISO, HIPAA, FFIEC, NIST, CIS Security frameworks

What You’ll Actually Do
• IT Control Attestations: Work directly with IT Audit Managers and clients to understand their IT systems, infrastructure, and control environment, applying this knowledge to various IT risk and control frameworks.
• IT Risk Assessments: Participate directly in assessing diverse IT risks for clients and their stakeholders, then develop comprehensive reports and presentations.
• Controls Testing: Evaluate controls by determining and executing the most effective methods to test their operational effectiveness.
• Documentation: Accurately document the procedures followed, the results obtained from control testing, and the conclusions drawn from these activities.
• Administrative Tasks: Track time diligently and maintain the designated chargeable hours throughout the internship period.

The Must-Haves
• Background: Actively pursuing a bachelor’s degree in accounting, information systems, or a similar field, with a keen interest in information technology.
• Experience: 0 – 1 year of relevant experience, demonstrating an interest in or foundational understanding of IT systems.
• Skills: Ability to understand and apply IT risk and control frameworks, conduct IT risk assessments, evaluate control effectiveness, and produce clear documentation.
• Bonus: A cumulative GPA of 3.0 or higher.