Cyber Risk and Compliance Intern

NOTE: This summer internship is for up to 13 weeks, starting from the first day of the internship and ending no later than September 4, 2026. Interns are expected to work 35 hours per week in person.


Job Description

About the Team

At the NYC Department of Buildings, we are responsible for ensuring the safe and lawful use of buildings and properties by enforcing the NYC Construction Codes, Energy Code and Zoning Resolution. We facilitate compliant development with integrity, efficiency, and professionalism. As an Agency, we are committed to remaining a premier municipal building organization, dedicated to enhancing the quality of life for all New Yorkers and making our city safer. As an employer, we are committed to improving our performance and developing procedures that are streamlined, understandable, and transparent.

The Information Security Unit is responsible for developing and executing information security, strategy, policy, enforcement, compliance, risk mitigation, cybersecurity, and cybersecurity awareness. Responsibilities also encompass supporting security assessments of IT infrastructure and applications while defining security standards and developing and implementing security controls.


Position Responsibilities

Under the direction and supervision of the Director, Information Security, the intern will:
- Assist in the development and maintenance of policies, procedures, and controls to ensure compliance with all applicable regulations, and standards of NIST 800-53 Cybersecurity Framework.
- Participate in defining project scope, goals, deliverables, and resource requirements to implement NIST 800-53 Cybersecurity Framework.
- Conduct assessments of operational and technical security controls or enhancements employed within or inherited by the information technology system to determine overall effectiveness of the controls as defined by NIST 800-53 Cybersecurity Framework.
- Assist the IT organization's risk assessment process, including evaluating the effectiveness of existing controls and recommending improvements as needed.
- Coordinate and manage external audits, assessments, and certifications, acting as the primary liaison with auditors, regulators, and other external stakeholders.
- Conduct regular audits to ensure that the system is being operated securely, and information system policies and procedures are being implemented as defined in security plans.


Major / Field of Study
- Enrolled in a Computer Science, Information Technology, Technology Management or a closely related Graduate program.
- Preferred qualification: possesses an undergraduate degree in Computer Science or Information Technology

SUMMER GRADUATE INTERN - 10232