Technology Risk & Operations

Technology Risk & Operations

New York, NY | Full or Part Time Internship

Role Overview

We are seeking a motivated and detail-oriented intern to join our Technology Risk & Operations team in New York City. This is a broad, hands-on role spanning operational resiliency, data protection, IT risk management, business analysis, and third-party risk. The successful candidate will work across multiple disciplines, gaining exposure to real-world risk and control frameworks within a fast-paced financial services environment.

Main Responsibilities

1.  Operational Resiliency

• Assist in conducting Business Continuity and Disaster Recovery (BC-DR) risk and control assessments across entities, desks and systems.
• Coordinate BC-DR testing activities.
• Learn, configure and test the Crisis Management broadcast system.

2.  Data Protection

• Analyse data classification and data processing output from scanning tools.
• Identify and follow up on data cleansing tasks.
• Analyse data processing trends and identify control improvement actions.
• Assist in conducting data protection risk and control assessments across different entities.

3.  Technology Asset Management

• Learn and utilise the security asset management tools to analyse and present information.
• Help develop business context for IT data and contribute to management information (MI) reporting.

4.  IT Risk Management & Third Party Risk Management

• Assist in conducting IT General Controls (ITGC) risk assessments across operational systems and departments.
• Conduct third-party risk assessments.

5.  Business Analysis

• Support requirements gathering and analysis for a range of technology and business projects.

In addition to the above, the intern may be asked to assist with ad hoc duties as required.

Learning Opportunities

This role offers a structured and varied learning experience across several risk and technology domains:

Operational Resiliency

• Fundamentals of Crisis Management communications.
• How to conduct complex risk assessments across business and technical domains.
• Preparing MI and presenting complex information in a consumable format.
• Project coordination skills.
• Business Spanish (where applicable, given the volume of work with LATAM offices).

Data Protection

• Fundamentals of data classification from a security risk perspective.
• How to extract actionable insight from large datasets efficiently.
• Working with and influencing a variety of stakeholder groups to reduce sensitive data risk.

Technology Asset Management

• Data analysis and management information (MI) development.

IT Risk Management & Third-Party Risk Management

• Operational risk management, auditing and controls testing.
• Third-party risk assessment methodologies.
• Familiarity with ISO 27001, SOC Type 1 & 2, and other relevant standards.

Business Analysis

• Requirements management.
• Business process mapping.
• Data flows and modelling.

Knowledge & Expertise

• Strong analytical and problem-solving skills.
• Excellent interpersonal and communication skills, both written and verbal.
• High attention to detail.
• Ability to manage multiple tasks simultaneously and adapt quickly to new challenges.
• An interest in technology, risk, information security or financial services.
• Knowledge of risk management frameworks or information security concepts is a plus.

Experience, Qualifications & Other Requirements

• Bachelor’s degree (in progress or recently completed) with a competitive GPA.
• Recent graduate or penultimate-year student.
• High proficiency in Microsoft Excel and the wider Microsoft Office suite.
• Strong written and verbal communication skills.
• Business Spanish language skills are advantageous given engagement with LATAM offices.
• Prior exposure to risk, compliance, audit, technology or financial services is a plus.

Additional Skills & Attributes

• A proactive, self-motivated approach with a strong sense of ownership.
• Comfortable working in a dynamic environment where priorities can shift.
• Collaborative mind-set with the ability to support and motivate team members.
• An open attitude to knowledge-sharing and contributing to a positive team culture.
• Comfortable presenting findings and information to stakeholders at varying levels of seniority.