Responsibilities
The Information Security Intern will support the AMER region’s cybersecurity training and awareness program. The position requires good communication skills (written and verbal) and strong business analysis skills. The intern will be responsible for running cybersecurity controls for phishing simulations, suspicious email reviews and maintaining information for risk analysis and management reporting. Working knowledge of cybersecurity and risk assessment frameworks (e.g., NIST) and regulations applicable to the financial services industry (e.g., NYDFS 500, FINRA, SEC) is preferred.
The Information Security Training and Awareness Intern is a member of the Governance, Strategy and Awareness (GSA) team within the AMER Data and Cyber Security (DCS) department and reports to the regional head of cybersecurity training and awareness. This position requires strong organizational skills and the ability to collaborate with staff in other departments.
RESPONSIBILITIES
- Support the AMER cybersecurity training program.
- Perform phishing control and leverage phishing metrics across the AMER region to identify staff at risk of being phished for enrollment in targeted training.
- Review emails reported by staff as suspicious using security tools.
- Leverage information gained from reviewing suspicious emails to update the security training library and phishing campaigns.
- Assist the regional head in coordinating and running security awareness events including recruitment of outside cybersecurity experts from law enforcement, and private industry.
- Suggest new methods of raising staff awareness on cybersecurity risks.
Profile required
- Good analytical skills, highly motivated, competitive, and attracted to challenging opportunities.
- Possess strong written, verbal and presentation skills.
- Ability to do independent research and summarize findings.
· Demonstrate the ability to work in a fast-paced environment where organizational skills are essential.
· Proficient in Excel and PowerPoint presentations.
EDUCATION
· Bachelor’s degree in computer science, engineering, or relevant technical field
· Prefer candidate enrolled or applying for a Master’s program for cybersecurity
· Knowledge of Information Security – certifications a plus
· Fundamental understanding of communications technologies: email, FTP, Web
Business insight
OUR CULTURE:
At Societe Generale, we live by our 4 core values of commitment, responsibility, team spirit and innovation. We are engaged and demonstrate consideration for others. We act ethically and with courage. We focus our talent and energy on collective success. We experiment and propose new ideas. This way, we maximize our ability to serve client needs and anticipate market changes. Societe Generale is committed to strengthening bonds with colleagues, communities, and the world in which we live, because relationships are at the heart of how we operate.
For more information about our Culture and Conduct initiatives, please visit this link (https://americas.societegenerale.com/en/careers/get-know-culture/)
D&I:
Our Diversity & Inclusion Mission: Recruit, develop, advance, and retain a diverse workforce that is united in our efforts to enhance our competitive position and deliver innovative solutions to our clients.
Our Diversity & Inclusion Vision:
• Engaged workforce that is demographically diverse in a way that reflects the communities in which we operate
• Inclusive culture and workplace that recognizes employees' unique needs and utilizes their diverse talents
• Engage our community and marketplace, and position the organization to meet the needs of all its clients
For more information about our D&I initiatives, please visit this link (https://americas.societegenerale.com/en/societe-generale-about/diversity-and-inclusion/)
HYBRID WORK ENVIRONMENT:
For most positions, Societe Generale offers a hybrid work arrangement that offers employees the flexibility to work remotely, as well as on-site, in order to promote interaction and collaboration with colleagues while adhering to all SG standard protocols. Hybrid work arrangements vary based on business area. The applicable Business lines will determine and communicate the work arrangements that best meet their business needs.
COMPENSATION & SALARY RANGE:
Base salary range does not include overtime pay, bonus and/or other benefits, where applicable. Actual base salary offer will vary based on skills and experience.
Societe Generale is an equal opportunity employer, and we are proud to make diversity a strength for our company. We are committed to recognizing and promoting the talents and achievements of our employees and staff, regardless of race, religion, color, national origin, sex, disability, age, gender, sexual orientation, and any other characteristic or status protected under applicable law.