Security Risk & Compliance Intern - PatientPoint

Location: Chicago, Illinois (500 W Madison)

Target Start Date: June 2nd, 2025

Hybrid Schedule: 3 days in office / 2 days at home weekly 

Job Summary 

This role will provide support for maturing and optimizing information security governance, risk management, and compliance capabilities across PatientPoint's footprint. You will help drive the growth and maturity of our information security program by contributing to various projects and daily tasks that align with PatientPoint's business needs. Your work will help ensure that PatientPoint meets its security governance and compliance goals, which include regulatory audits and proactive risk management. 

What You'll Do 

• Provide support in the implementation of security projects aligned with PatientPoint's business needs to further mature our information security governance, risk, and compliance program, including building dashboards, updating and maintaining risk registers, and assisting in automation. 
• Diligently take up and accomplish daily Risk and Compliance tasks to achieve the team's goals within defined deadlines. 
• Conduct Vendor Risk Assessments to proactively reduce the risks originating from third parties. 
• Provide support in responding to security tickets. 
• Assist in maintaining the annual security compliance and audit calendar, including FedRAMP, SOC 2, and ISO 27001:2013 audits, as well as customer-initiated audits. 
• Assist with maintaining information security program documentation, consisting of security policies, standards, and guidelines, and coordinating management ratification of these policies at regular intervals. 
• Participate in improving the overall security culture across PatientPoint by providing ideas and input aligned with addressing identified risks and compliance gaps in training course materials. 

What We Need 

• Currently pursuing a Bachelor's in Computer Science, Information Security, or a related degree. GPA of 3.0 or higher. 
• Good interpersonal communication skills with experience in collaborating with internal and external partners to produce positive security risk management outcomes. 
• Ability to learn quickly, take ownership of new projects, and adopt new technologies and methodologies. 
• Basic understanding of risk assessment methodologies and best practices. 
• Proficiency with productivity and collaboration tools such as Microsoft Office, Slack, Box, and Zoom. 

Desired Qualifications 

• Experience or knowledge of FedRAMP, SOC 2, or ISO 27001:2013 audits. 
• Strong organizational skills and ability to manage documentation, including policies, standards, risk assessment reports, and other security risk management documentation. 
• Excellent presentation and written communication skills with a team-focused attitude. 

What You'll Need to Succeed 

• Ability to thrive in a collaborative environment, working closely with cross-functional teams. 
• Detail-oriented with the ability to produce high-quality documentation and reports. 
• A proactive mindset with the ability to contribute ideas that enhance the overall security culture at PatientPoint.