Overview
The Technology Audit team within Internal Audit provides independent assurance over the technology environment, including IT general controls, application and infrastructure controls, cloud and platform security, cybersecurity, and change and access management.
This internship is a 3–6 month program for Early Career talent. Interns support planning and execution of technology audits and use data analytics and automation to improve audit effectiveness in a fast-moving, engineering-driven organization.
Responsibilities
- Assist in planning and execution of technology audits covering:
- IT general controls (ITGC)
- Application controls
- Infrastructure, cloud, and cybersecurity
- Support testing of key controls, including:
- Logical access and identity management
- Change management
- System development lifecycle (SDLC)
- IT operations
- Review cloud and platform configurations (e.g., AWS/GCP/Alibaba Cloud), CI/CD pipelines, and DevOps practices against control and security expectations
- Design and implement scripts/tools to automate audit procedures, continuous control monitoring, and data analysis
- Extract, clean, and analyze data from logs, systems, and databases to identify control gaps, anomalies, and areas of risk
- Prepare clear workpapers, reports, and presentations summarizing audit findings and recommendations
- Collaborate with auditors and stakeholders across engineering, security, and compliance to support risk assessments and remediation tracking
- Stay current on emerging technology risks, cybersecurity threats, cloud services, and audit best practices, including in blockchain and Web3 environments
Requirements
- Currently enrolled in a Bachelor’s or Master’s program, or a recent graduate, in Computer Science, Information Systems, Cybersecurity, Data Science, Engineering, or a related field
- Strong interest in technology risk, information security, and IT/technology auditing
- Foundational understanding of IT concepts such as operating systems, databases, networks, cloud computing, and the software development lifecycle
- Familiarity with data analysis and scripting tools (e.g., Python, SQL); ability to work with logs and large datasets
- Ability to interpret technical information and synthesize clear, actionable insights
- Strong written and verbal communication skills, including the ability to explain technical concepts to non-technical stakeholders
- High attention to detail, ethics, and personal integrity
- Bilingual English/Mandarin required to coordinate with overseas partners and stakeholders
- Ability to commit 5 days per week for 6 months
Preferred Qualifications
- Exposure to control frameworks and standards (e.g., COBIT, NIST, ISO 27001, SOC 2) or IT audit methodology
- Familiarity with cloud platforms, containers/Kubernetes, CI/CD, or infrastructure-as-code
- Awareness of cybersecurity concepts (identity and access management, encryption, vulnerability management, logging and monitoring)
- Interest in blockchain technology, smart contracts, and Web3 technology risks
- Prior internship or project experience in IT audit, technology risk, cybersecurity, or data analytics
- Relevant certifications or progress toward them (e.g., CISA, CISSP, CompTIA Security+, cloud practitioner)
Compensation & Benefits
- Competitive salary and company benefits
Location
- Remote-first, work-from-home arrangement (may vary depending on the nature of the role and team)