Information Risk Management Intern

Are you interested in how large organizations manage risk, strengthen controls, and build sustainable governance processes? Trinity Industries is seeking a motivated Information Risk Management Program Intern to help redesign a key enterprise initiative that will shape how we monitor and maintain compliance across our technology ecosystem.

This is a high-impact internship where you’ll work directly with Information Risk Management (IRM) leaders and technology teams to rebuild a program that supports continuous compliance, improves visibility, and reduces risk across applications, infrastructure, hardware, and IT services.

What You’ll Work On:
You’ll play a central role in reimagining the Information Compliance Self‑Assessment Program, including:

• Evaluating the original program design to identify root causes for low adoption and scalability challenges
• Developing a structured, directive‑aligned question library based on policies, standards, and requirements
• Designing a modernized assessment and routing model aligned to control themes and system types
• Identifying automation opportunities using Microsoft 365 tools such as SharePoint, Power Automate, Excel, and Power BI
• Supporting reporting and documentation to prepare for enterprise rollout and audit readiness
• Your work will directly contribute to Trinity’s broader goals of strengthening governance, improving compliance posture, and enhancing control effectiveness across the organization

What You’ll Deliver:
By the end of the internship, you’ll produce:

• A directive‑aligned question library
• A redesigned self‑assessment workflow
• A documentation package supporting process adoption
• A dashboard or reporting concept
• A final presentation summarizing your recommendations and design decisions

These deliverables will give you tangible, portfolio‑ready experience in governance and compliance design

What You’ll Learn:

• This internship offers exposure across cybersecurity, IT, and enterprise governance and you'll gain hands-on experience with governance, risk, and compliance (GRC) operations
• Insight into how directive documents translate into real-world controls and compliance activities
• Skills in process design, workflow modeling, and structured documentation
• Practical experience using Microsoft 365 tools for automation and reporting
• Strengthened analytical, communication, and stakeholder‑engagement capabilities

What We’re Looking For:

• Candidates pursuing a bachelor’s or master’s degree in Cybersecurity, Information Systems, Business, Data Analytics, Computer Science, or a related field
• Strong analytical and critical-thinking skills
• Clear written and verbal communication abilities
• Comfort working cross-functionally with technical and non-technical stakeholders
• Familiarity with Microsoft Office or Microsoft 365 applications