Cybersecurity and Information Security Intern

FIRST STATE BANK – JOB DESCRIPTION

JOB TITLE: Cybersecurity and Information Security Intern
STATUS: Non-Exempt/Intern
DEPARTMENT: Information Technology
REPORTS TO: Information Technology

PRIMARY PURPOSE OF THE JOB:
The Cybersecurity & Information Security Intern supports the Information Technology and Information Security teams in maintaining and enhancing the Bank’s cybersecurity posture. This role assists with monitoring security controls, participating in vendor management activities, and supporting the ongoing development of the Information Security Program. The intern will gain hands-on experience in cybersecurity operations, risk management, regulatory compliance, and security governance.

ESSENTIAL DUTIES:
• Assist in maintaining the Bank’s Information Security Framework, including policies, procedures, standards, and guidelines.
• Support cybersecurity monitoring activities, including reviewing security dashboards, alerts, logs, and vulnerability reports.
• Assist in maintaining information security documentation, assessments, and program updates.
• Participate in vendor management activities, including collecting documentation, reviewing vendor due diligence materials, and tracking vendor risk ratings.
• Support the review of SOC reports, cyber insurance documentation, contracts, and other vendor security materials.
• Assist with basic risk assessment tasks, including documenting risks, controls, and remediation steps.
• Help monitor and evaluate physical and logical security controls.
• Support the Information Security Officer in reporting and documenting security incidents or potential violations.
• Assist in coordinating and delivering employee cybersecurity awareness training.
• Participate in internal and external audit preparation activities.
• Assist with periodic Information Security walkthroughs and compliance checks.
• Research emerging cyber threats, trends, and best practices.
• Provide general IT and security-related support to staff as needed, including preparation of materials, reports, and documentation for Board of Directors and ITSC meetings.

OTHER DUTIES:
• Attend team meetings and training sessions as required.
• Assist with after-hours tasks on an as-needed basis.
• Perform additional duties as assigned.

REQUIRED EXPERIENCE/SKILLS:
• Strong interest in cybersecurity, information security, or IT risk management.
• Familiarity with cybersecurity concepts such as threat detection, vulnerabilities, risk assessment, and security controls.
• Basic understanding of vendor management principles is preferred.
• Experience or coursework involving information technology, networking, or security fundamentals.
• Strong analytical, organizational, and documentation skills.
• Excellent written and verbal communication abilities.
• Ability to manage multiple tasks simultaneously.
• Strong attention to detail and willingness to learn.
• Ability to work effectively and professionally with team members across departments.
• Proficiency with MS Office Suite (Word, Excel, Outlook, PowerPoint).

REQUIRED EDUCATION:
• Currently pursuing an Associate or bachelor’s degree in Cybersecurity, Information Technology, Computer Science, or a related field.
• Industry certifications (CompTIA Security+, Network+, or related) are a plus but not required.
• Ongoing job-specific training will be provided.

WORKING CONDITIONS:
• Some same-day travel between branches may be required using personal vehicle.
• Must be able to work with computers, software applications, and security tools.
• Occasional after-hours availability may be requested.

Employees are expected to comply with all laws, regulations, bank policies and procedures, including specifically First State Bank’s Bank Secrecy Act and Anti-Money Laundering Policy and procedures, and its Customer Identification Program. Failure to comply with either the letter and/or spirit of these laws may result in disciplinary action, up to an including termination.

This job description does not list all the duties of the job. You may be asked by supervisors or managers to perform other instructions and duties. You will be evaluated in part based on your performance of the tasks listed in this job description.

Management has the right to revise this job description at any time. The job description is not a contract for employment, and either you or the employer may terminate employment at any time, for any reason.