Summer 2027 IT Audit Undergraduate Intern

About the role

The Summer 2027 Undergraduate IT Audit Internship at Highmark Health provides students with practical, hands‑on experience supporting information technology audit, cybersecurity, data privacy, risk management, and governance activities across Highmark Health and its subsidiaries. The internship is designed to develop the next generation of diverse business and technology professionals through direct exposure to enterprise IT risk assessment, information security controls, system implementations, compliance processes, and audit execution. As a member of the Internal Audit team, the intern will work alongside IT Audit, Information Security, Privacy, Risk Management, and business professionals to evaluate the effectiveness of controls that protect organizational assets, sensitive information, and critical business systems. Participants will gain insight into how organizations identify, assess, and manage information technology and cybersecurity risks while ensuring compliance with regulatory requirements, industry standards, and internal policies. The program offers hands‑on training and experience in IT auditing, risk assessment, data privacy, cybersecurity governance, and advisory services. Interns will assist with evaluating technology‑related processes and controls to determine whether risks are appropriately identified and managed and whether financial, operational, and protected information is secure, accurate, reliable, and processed in a timely manner. Participants will also gain exposure to system implementation reviews, project management controls, and audit methodologies while contributing to meaningful projects that support the organization's overall risk management objectives. Interns will also gain experience working in highly regulated environments that require adherence to data privacy, information security, and HIPAA requirements.

Responsibilities

• Support day‑to‑day audit activities
• Participate in IT assurance and advisory engagements
• Assess technology and security risks
• Perform research and analysis
• Document audit results
• Develop recommendations for process improvements
• Collaborate with stakeholders across the organization
• Gain experience in highly regulated environments requiring adherence to data privacy, information security, and HIPAA requirements
• Provide services to the day‑to‑day operating objectives of the assigned area
• Participate in projects and programs appropriate to the needs of the assigned area
• Participate in the planning and implementation of projects and initiatives
• Conduct research and reporting, including recommendations or proposals for action
• Communicate effectively while interacting directly with colleagues, clientele, and/or other internal or external constituencies in the planning of assignments and resolution of day‑to‑day operational problems
• Under supervision, provide entry‑level professional services appropriate to the day‑to‑day operating objectives of the area
• Receive guidance, training, and mentoring from senior personnel in planning and carrying out activities and assignments
• Undertake and/or participate in projects and programs designed to develop professional skills and expertise appropriate to the needs of the organization
• Participate in the planning and implementation of unit projects and initiatives within the area of expertise and ability
• As specifically requested by management, conduct research and reporting inclusive of recommendations or alternative proposals for action
• Undertake related studies or enrichment programs as appropriate to the specific objectives of the operating unit
• Perform miscellaneous job‑related duties as assigned

Requirements

Full or part‑time enrollment in an accredited college or university baccalaureate program.

Qualifications

Pursuing a degree in Accounting, Finance, Business Administration, Information Technology, Computer Science, Cybersecurity, Information Systems, or a related field.