Intern – Cybersecurity Risk (Hybrid: Onsite & Remote)

ARE YOU A CURRENT US FOODS EMPLOYEE? PLEASE APPLY DIRECTLY THROUGH OUR INTERNAL WORKDAY CAREER SITE Join Our Community of Food People! The US Foods Summer Internship Program provides a forum for students to apply classroom skills and academic training in a real-world business environment. In addition to being assigned business-impacting projects throughout the summer, students will be matched with a manager who will meet with them on a regular basis to provide direction on assignments as well as deliver performance feedback and a mentor who will be available to offer day-to-day guidance and support. Interns will also get exposure to US Foods executive leadership; have an opportunity to participate in learning and social events with other interns across business functions and have an opportunity to deliver an end of summer presentation to showcase their accomplishments with key business leaders. US Foods internships are full-time paid positions (40 hours per week from June - August) with the possibility of transitioning to a full-time position post-graduation dependent on availability and overall performance. This position has been segmented as Hybrid meaning the work is a combination of onsite and remote. Please note: We are unable to provide internships to students that require sponsorship for employment visa status (e.g., OPT, F-1, H-1B or any other visa status) now or in the future. [For Rosemont based internships only] Local candidates are encouraged to apply. For qualified students whose permanent home of record is located outside 50 miles from US Foods Corporate HQ, a sign-on bonus will be offered to partially offset housing costs for the summer. BASIC PURPOSE: The Cybersecurity Risk Intern will help support the day-to-day operations of the Technology Governance & Security Team at US Foods. This role will focus on enterprise technology and cyber risk management activities. This role is designed for a student or early-career professional to gain practical experience supporting risk governance processes, risk register administration, remediation tracking and reporting, risk metrics, risk awareness communications, and selected AI and privacy risk management activities. The cybersecurity intern will work with senior members of the cybersecurity team to learn firsthand how enterprise technology and cyber risk management practices are applied in a real-world business environment. ESSENTIAL DUTIES AND RESPONSIBILITIES: • Follow and execute directives issued by cybersecurity management and senior employees. • Support day-to-day enterprise technology and cyber risk governance activities, including intake tracking, documentation support, workflow monitoring, action item follow-up, and maintenance of records related to risk assessments, risk treatment, and reassessment activities. • Assist with maintaining the DigiTech risk register and related repositories by entering, updating, validating, and organizing risk data, ownership details, mitigation status, and supporting evidence under guidance from senior team members. • Support the development and maintenance of governance documentation, including procedures, templates, committee materials, SharePoint content, awareness materials, and communication artifacts that help scale enterprise technology risk management practices across DigiTech. • Conduct research and basic analysis on technology, cyber, AI, and privacy risks using internal information, stakeholder input, regulatory sources, and industry information to support risk identification, scoring, and governance discussions. • Assist with governance activities related to AI and privacy risk management. • Learn to manage or utilize tools and solutions implemented for risk management and identification. • Perform other duties as assigned. BASIC REQUIREMENTS: • Currently pursuing a Bachelor’s Degree or Master’s Degree in Cybersecurity, Information Assurance, or Information Technology or equivalent degree • Must be enrolled in school during time of internship • Typically, students currently between their Junior and Senior years or between their 1st and 2nd years of graduate school will be considered for internships • Fundamental knowledge of cybersecurity principles and best practices • Demonstrative passion for cybersecurity and risk management • Basic exposure to cyber security frameworks like NIST CSF preferred • Exposure to risk assessments, security assessments and/or governance processes preferred • Ability to support activities that measure and track cybersecurity risks, issues, and exceptions • Ability to collaborate and work in a team environment ADDITIONAL REQUIREMENTS: • Must have readily available access to high-speed internet • Must have regular, reliable method of transportation to commute to US Foods’ location RELATIONSHIPS INTERNAL/EXTERNAL MAY INCLUDE: • Internal: Core Team, Internal Business Clients • External: Vendors ***EOE – Race/Color/Religion/Sex/Sexual Orientation/Gender Identity/National Origin/ Age/Genetic Information /Protected Veteran/Disability Status***