IBM
Controls / Compliance Tester Intern 2027
IBM is hiring a Controls / Compliance Tester Intern 2027 in Yorktown Heights, New York, United States. Posted September 22, 2026.
Job at a glance
- Company
- IBM
- Location
- Yorktown Heights, New York, United States
- Posted
- September 22, 2026
- First scanned
- September 26, 2026
About the job
Introduction
This internship provides an excellent opportunity to gain practical experience in internal controls, regulatory compliance, risk management, cybersecurity governance, and audit support within a complex business environment.
Your role and responsibilities
The Controls & Compliance Tester Intern will support the organization's compliance, risk management, and internal controls programs by assisting with the evaluation and testing of operational, security, and business controls. This role offers hands-on experience in governance, risk, compliance (GRC), audit readiness, and process improvement initiatives. The intern will work closely with compliance professionals, control owners, and subject matter experts to help assess control effectiveness, document evidence, and identify opportunities for strengthening business processes.
Required education
Associate's Degree/College Diploma
Preferred education
Bachelor's Degree
Required technical and professional expertise
- Strong analytical and problem-solving abilities.
- Ability to organize information and maintain attention to detail.
- Demonstrated curiosity and willingness to learn complex business processes.
- Ability to work independently while seeking guidance when appropriate.
Preferred technical and professional experience
- Understanding of risk management, compliance, audit, or internal controls concepts.
- Experience analyzing data and identifying trends.
- Basic understanding of information security, cybersecurity, or technology governance principles.
- Knowledge of control frameworks such as: NIST Cybersecurity Framework (CSF), NIST 800-53, ISO 27001, SOC 2, COBIT, COSO Internal Control Framework.
- Familiarity with governance, risk, and compliance (GRC) tools is a plus.