Security Risk & Compliance Intern at Cvent in Tysons Corner, VA

Summary: Cvent is a leading provider of meetings, events, and hospitality technology, with a strong commitment to innovation and collaboration. They are seeking a Security Risk and Compliance Intern to support their information security governance, risk management, and compliance initiatives. The role involves working on security projects, vendor risk assessments, and contributing to the overall security culture at Cvent. Responsibilities: - Provide support in implementation of security projects aligned with Cvent’s business needs to further mature Cvent’s information security governance, risk and compliance program such as a building dashboards, updating and maintaining risk registers, assist in automation etc - Diligently take up and accomplish daily Risk and Compliance tasks to achieve the team’s goals within defined deadlines - Work on Vendor Risk Assessments to proactively reduce the risks originating from third parties - Provide support in responding to security tickets - Follow up on risks and assist in risk reporting - Support Cvent’s annual security compliance and audit calendar that includes annual PCI DSS, SSAE 18/SOC 1, SOC 2 and ISO 27001:2013 audits as well as customer-initiated audits, as needed - Assist with maintenance of information security program documentation consisting of information security policies, standards, and guidelines, and coordinating management ratification of policies and standards at regular intervals - Participate in improving the overall Security culture across Cvent providing ideas and input aligned to address identified risks and compliance gaps training course materials - Work on collecting and delivering KPI and metrics data Required Qualifications: - Full-time college student with plans to graduate in May 2027 (summer between Junior & Senior year) - Ability to work 40 hours per week for 10 weeks and commute to our headquarters in Tysons Corner, VA - Currently pursuing a BA/BS in Cyber Security, Information Security, or other related technical fields - Good interpersonal communication skills with experience and confidence in collaborating with internal and external partners and stakeholders to produce positive security risk management outcomes and developing productive relationships - Ability to learn quickly with a willingness to take ownership for new projects and learning new technologies and methodologies - Basic understanding of risk assessment methodologies and best practices - Ability and willingness to produce and maintain documentation and reports, specifically developing policies, standards, risk assessment reports, and other forms of Security Risk Management Program documentation - Proficiency with productivity and collaboration tools, such as Microsoft Office, Slack, Box, and Zoom - Excellent presentation and written communications skills and a team-focused attitude Required Skills: Cyber Security, Information Security, Risk Assessment Important Skills: Collaboration Tools