About the role#
UHY is seeking an intern to join our Technology, Risk, and Compliance (TRC) practice for the Winter 2027 term. This position offers hands-on experience in cybersecurity risk assessments, compliance reviews, and control evaluations. You will work alongside professionals across various industries, helping to deliver services aligned with frameworks like NIST CSF, NIST 800-53, NIST 800-171, CMMC, and PCI DSS.
What you'll do#
- Assist with technology and cybersecurity risk assessments and advisory engagements.
- Evaluate client environments against established frameworks and control requirements.
- Organize client documentation, including policies, procedures, system inventories, and evidence.
- Document assessment results, observations, risks, and recommendations.
- Research cybersecurity requirements and industry practices.
- Map controls across frameworks such as NIST CSF, NIST 800-53, NIST 800-171, CMMC, and PCI DSS.
- Help with vulnerability assessments and limited penetration testing under senior supervision.
- Participate in client interviews, walkthroughs, and team discussions.
- Prepare engagement workpapers, status trackers, and presentation materials.
- Support internal practice development, including template creation and knowledge sharing.
What you'll need#
- Currently pursuing a bachelor’s or master’s degree in information systems, information technology, computer science, accounting information systems, cybersecurity, or a related field.
- 0 to 1 year of relevant experience.
- A basic understanding of cybersecurity principles, including access control, vulnerability management, networking, and endpoint security.
- Strong written and verbal communication skills.
- Organizational skills and attention to detail.
- Ability to handle confidential information with discretion.
- Proficiency in Microsoft Office applications, including Word, Excel, and PowerPoint.
- Ability to work both independently and within a team.
- Familiarity with cybersecurity frameworks like NIST CSF, NIST 800-53, NIST 800-171, CMMC, CIS Controls, or PCI DSS is preferred.
- Exposure to assessment, audit, or compliance concepts through coursework, labs, or projects.
- Knowledge of vulnerability scanning, system hardening, or cloud security concepts.
Location & details#
- Location: West Des Moines, Iowa.
- Modality: On-site.
- Employment: Full-time paid internship.
- Travel: Frequent and unpredictable travel may be required based on client needs.
About UHY-US
UHY-US provides audit, tax, consulting, and advisory services to middle market clients. The firm operates as an independent member of UHY International, a global network of accounting and consulting firms. It maintains a presence across the United States with multiple office locations. The organization employs over 2,000 people.
How to get in at UHY-US
Applying early is a significant advantage when targeting UHY-US, as recruiters often prioritize the first candidates who appear in their queue. Intern Insider sends an instant alert the moment a role matching your target is published, helping you apply among the first before the pile grows. This helps you avoid the common frustration of submitting an application to a role that has already been filled or overlooked. Securing a direct line to the hiring team can also improve your chances of getting a response. Intern Insider surfaces the recruiters behind the company roles so you can reach out directly to ask about the position or a referral. This proactive approach often yields better results than relying solely on automated application systems.
