Intern, Information Security Risk and Compliance

Sony Corporation of America, located in New York, NY, is the U.S. headquarters of Sony Group Corporation, based in Tokyo, Japan. Sony's principal U.S. businesses include Sony Electronics Inc., Sony Interactive Entertainment LLC, Sony Music Entertainment, Sony Music Publishing and Sony Pictures Entertainment Inc. With some 900 million Sony devices in hands and homes worldwide today, a vast array of Sony movies, television shows and music, and the PlayStation Network, Sony creates and delivers more entertainment experiences to more people than anyone else on earth. To learn more: www.sony.com/en.
 

Position Summary

Sony Corporation of America (SCA) is seeking an Intern, Information Security Risk and Compliance, to join the Information Security Department located in New York City.

This position will report to the Manager, Information Security, and be a part of the team responsible for securing Sony’s information assets and continually enhancing SCA’s Information Security program.

This internship is a great opportunity to get hands on experience across risk domains, help shape the future of security governance, and contribute to fostering a security-first culture.

Responsibilities:

• Provide day-to-day operational and administrative support to the Governance, Risk, and Compliance (GRC) function within the program.
• Support risk assessment of prospective third parties to evaluate their security posture and compliance practices.
• Assist in preparing detailed reports on risk findings and security gaps following third-party risk assessment.
• Assist in maintaining third-party asset inventory in the GRC tool.
• Contribute to the development and improvement of third-party risk management processes.
• Participate in the creation and delivery of information security awareness, training, and education program materials.

Qualifications:

• Current student pursuing a bachelor's degree in Cybersecurity, Computer Science, Information Security, or a related field. 
• Working knowledge of regulatory frameworks (ISO 27001, NIST, PCI DSS) beneficial.
• Working knowledge of GRC tools such as RSA Archer a plus.
• Familiarity with cybersecurity best practices, and ability/interest in creating engaging awareness materials.
• Excellent writing skills with a proven ability to write clear, unambiguous instructions.
• Demonstrated strong analytical, problem-solving skills, and attention to detail are essential.
• All candidates must be authorized to work in the USA. 

The target hourly rate for this internship is $24.00 per hour. The individual will be paid hourly and eligible for overtime. 

All qualified applicants will receive consideration for employment without regard to any basis protected by applicable federal, state, or local law, ordinance, or regulation.

Disability Accommodation for Applicants to Sony Corporation of America

Sony Corporation of America provides reasonable accommodation for qualified individuals with disabilities and disabled veterans in job application procedures. For reasonable accommodation requests, please contact us by email at careers@sonyusa.com or by mail to: Sony Corporation of America, People Experience Department, 25 Madison Avenue, New York, NY 10010. Please indicate the position you are applying for.

We are aware that unauthorized individuals or organizations may attempt to solicit personal information or payments from job applicants by impersonating our company through fraudulent job postings.  We take these matters seriously but cannot control third-party websites. To protect your personal information, please verify that any job posting you respond to also appears on our official Careers page: www.sonyjobs.com.  Please also be advised that we never request personal identifying information (such as Social Security numbers, bank details, or copies of identification documents) during the initial stages of our application process.  If you have any doubts about the authenticity of a job posting or communication, please contact careers@sonyusa.com before submitting any information.

Right to Work (English/Spanish)

E-Verify Participation (English/Spanish)