Spring Intern - Information Security Risk

Job Description

Information Security Risk, Intern – Spring 2023

The Sony Pictures Entertainment Internship program offers a unique opportunity to work alongside the teams that come together to create movies, TV shows, and other great experiences. These seasonal, paid assignments to provide meaningful and productive work that allows you to build your resume, experience and develop your skills further. You will be provided with challenging tasks, real-world experience, valuable networking opportunities, and many educational and social opportunities. This Spring Internship is from January through May 26th and all candidates must be able to work between 10-29 hours a week, Monday through Friday (flexible depending on school schedule).

DEPARTMENT DESCRIPTION:
Our InfoSec Risk Management team is responsible for providing risk visibility to all of SPE and helping business stakeholders make informed risk decisions to ensure SPE information is protected in all our third-party engagements.

RESPONSIBILITIES:
• Analyze risk program data and share insights to help improve the program
• Support end-to-end information security risk assessments to identify, assess, and measure information security risks for systems, applications, facilities, technical environments, networks, projects, workflows, and third parties impacting IT and business initiatives globally across Sony Pictures and SPE subsidiaries
• Support risk assessment report writeups and readouts
• Support third-party contract review to provide input on Information Security terms

QUALIFICATIONS:
• Good analytical, research, and problem-solving skills with keen attention to detail
• Ability to communicate clearly and concisely with technical and non-technical teams across multiple businesses; written, verbal, presentation, and interpersonal skills.
• Ability to work on multiple projects, with a strong ability to adapt to dynamic work environments and prioritize tasks accordingly
• Ability to make decisions, use discretion, and display sound judgment
• Highly self-motivated and able to work both independently and as part of a multi-disciplined team

PREFERRED QUALIFICATIONS:
• Work experience in information security
• Experience with risk assessments including technical, third-party, and workflow assessments
• Familiarity with ISO 27000 family of standards and other risk frameworks such as NIST 800-53, ISO 31001
• Technical exposure to Cloud-based technologies

USA - Culver City - Studio Lot - CA01

Jobcode: Reference SBJ-r0pmbe-18-217-220-114-42 in your application.