Job Summary

This is an internship position at CITGO Petroleum Corporation Headquarters, Houston, TX.   This will be an ONGOING internship - not a summer internship only.

The Information Security Intern will support the Information Security team with day‑to‑day operational and compliance activities. This role provides practical exposure to cybersecurity governance, risk management, and compliance (GRC) functions while helping to alleviate the team’s workload.

The primary focus of this position is to assist with cybersecurity GRC initiatives, including identifying, assessing, and supporting the mitigation of risks to the organization’s information assets. The intern will contribute to ensuring effective implementation of cybersecurity risk, compliance, and governance processes.

In this role, the intern will also assist with ongoing monitoring and various GRC‑related tasks to support the overall effectiveness and efficiency of the Information Security program.

Minimum Qualifications

• Must be enrolled in an accredited Cybersecurity/Risk Management, or other IT-related degree program with a sophomore classification or higher.
• Must have a 3.0 GPA or higher.
• A solid understanding of information security principles, best practices, and current threats.
• Knowledge of Network security principles, best practices, and common vulnerabilities.
• Knowledge of laws, regulations, policies, and ethics related to cybersecurity and privacy.
• Strong communication and presentation, analytical and problem-solving skills.
• Highly motivated self-starter who can self-prioritize to ensure optimum & timely results.
• Attention to detail and a commitment to maintaining up-to-date knowledge of the field.

Preferred:

• Professional certifications such as Certified in Risk and Information Systems Control (CRISC), Certified Information Systems Security Professional (CISSP) or Certified Information Security Manager (CISM) is a plus.

Job Duties

• Conduct daily monitoring activities to identify and report potential security risks.
• Assist with the planning and execution of security awareness campaigns.
• Track and follow up on contractor completion of required cybersecurity training (CBTs).
• Support monitoring efforts related to system and security hardening standards.
• Assist with the annual information security risk assessment review and documentation.

Job Duties II