Intern, Risk Management

Sony Corporation of America located in New York NY is the U.S. headquarters of Sony Group Corporation based in Tokyo Japan. Sonys principal U.S. businesses include Sony Electronics Inc. Sony Interactive Entertainment LLC Sony Music Entertainment Sony Music Publishing and Sony Pictures Entertainment Inc. With some 900 million Sony devices in hands and homes worldwide today a vast array of Sony movies television shows and music and the PlayStation Network Sony creates and delivers more entertainment experiences to more people than anyone else on earth. To learn more: Summary

Sony Corporation of America (SCA)isseekinga motivated and detail-orientedInternRiskManagementtosupport the Corporate Information Security Department (CISD). This internship provides hands-on exposure to information security risk management governance risk and compliance (GRC) processes and third-party security assessments. The intern will work closely with the Risk Management team to help protect Sonys information assets systems and services.

TheCISDsummer internship program is designed to provide skills knowledge and hands-on work experience in the information security and privacy industry supporting the personal growth of our interns as well as Sony business results.

This 12week summer internship runs from June through August andoffers a hybrid workoption.

Responsibilities:

• Assistwithinformation security risk assessmentsfor systems applications projects and third-party vendors.

• Support the preparation ofrisk assessment documentation and reportsfor internal stakeholders.

• Help withvendor security reviews including gathering evidence and reviewing security questionnaires.

• Collaborate with security technology and business teams to track identified risks and mitigation actions.

• Support activities related to theglobal GRC platform including data entry intake tracking and documentation.

• Assistin documentingbusiness requirements process flows and enhancement requestsfor GRC initiatives.

• Participate inidentifyinggaps in processes or controls and proposing improvement ideas.

• Supporttesting activities including test case execution and validation of results.

• Assistwithtraining materials presentations and stakeholder communication.

• Provide general administrative and project support for risk management and GRC initiatives as needed.

• Honesty trustworthiness and ethical conduct are material requirements for the responsibilities outlined above.

Qualifications: