Cybersecurity Internship Winter 2027 - International Organization for Standardization (ISO)

Job Description

Job Description

Consultant Development Program (Winter)

at Tevora

Irvine, CA, and Fairfax, VA - DC Local

(Winter): Our anticipated dates for this cohort will be January 25 - April 2

If you haven't heard of Tevora, it's because we've done our job!

Tevora is a tight-knit community of professionals with a shared passion for our craft. Every day, we combine in-depth knowledge of cybersecurity, technology, and compliance to help create more secure digital environments. To Tevorans, every problem is a puzzle in need of solving. We strongly believe that if we put smart, driven people in a room together, they will accomplish great things. We maintain a supportive culture that celebrates continuous learning, diverse perspectives, and sharing the wins. That's why we have our eyes on you.

What is the Cybersecurity Consultant Development Program?   

Our Cybersecurity Consultant Development Program is an immersive paid-training internship program designed to help participants strengthen the technical and professional skills needed to enter the workforce as a full-time Information Security Associate.

Security Practice Area: International Organization for Standardization (ISO) 

• Joining interviews with various clients' subject matter experts to assist in data collection 

• Assist in template and procedure creation for ISO Compliance and Risk solutions 

• Assist in report writing and the delivery of client reports 

• Learning about National and International standards, frameworks, and legislations that govern the industry, such as ISO 27000 series (e.g., 27001, 27017, 27018, 27701, etc.), ISO 22301, ISO 42001, and other international standards 

• Assess the security posture of organizations across a multitude of industries against internationally recognized ISO 27000 series standards established by the International Organization for Standardization (ISO) 

• Support organizations in the development of an ISO 27001-compliant Information Security Management System (ISMS), a systematic and iterative approach to managing organizational risk for all forms of sensitive data. 

• Aid organizations in aligning their ISMS with ISO 27018 and 27701, a globally recognized standard designed to ensure security and privacy of Personally Identifiable Information (PII) within Cloud applications or services. 

• Support organizations in the development of an ISO 22301 compliant Business Continuity Management Systems (BCMS), a systematic and iterative approach to managing organizational business and disaster recovery. 

What’s the Role? 

The Developing Consultant (DC) is an up-and-coming part of the client-facing consulting team. DCs are responsible for helping in conducting project delivery activities based on their selected Tevora Information Security practice areas, including Enterprise Risk, Compliance, Solutions Implementation, and Threat Research. Interns are expected to continually develop their skills through personal development and Information Security industry participation. 

Key Responsibilities: 

• Develop technical and business skills required to perform billable work on projects as quickly as possible 

• Learn about industry-standard certifications and their benefits 

• Learn about National and International standards and frameworks like PCI-DSS, HIPAA, and ISO 27001 

• Observe implementations of Enterprise Security Solutions 

• Observe and help with internal and external penetration testing and social engineering projects 

• Plan technical execution plans to meet business requirements  

• Gather requirements to complete execution plans  

• Execute on previously designed plans  

• Document execution procedures and provide professional insights into the technologies involved  

• Assist Consultants with client engagements  

Necessary skills and qualifications: 

Every DC at Tevora is a technologist at heart but understands the critical intersection between business and technology. Foundationally, the ideal candidate will have basic familiarity with: 

• Networking concepts like firewalls, routers, switches, and DNS 

• Computer troubleshooting and server systems administration 

• Business planning and accounting 

• Any knowledge of compliance frameworks is a plus 

Abilities: 

• Multi-tasking and time management skills 

• Dynamic, enthusiastic, and excellent interpersonal skills 

• Excellent writing both expository and technical documentation 

• Intermediate working knowledge of Excel and Word 

• Self-starter who likes to tinker and learn on their own 

Education and Experience: 

• Bachelor's Degree from an accredited 4-year university (or Military equivalent) or currently enrolled at an accredited 4-year university (or Military equivalent) 

• IT, Cybersecurity, and Information Security certifications a plus 

Additional requirements: 

• Eligibility to work in the United States. 

• Required to work onsite at our Fairfax, VA, or Irvine, CA, location. 

We've got you covered! 

• Paid Sick Time Off 

• Vibrant work culture 

• Career advancement opportunities 

Thank you for your interest in our Consultant Development Program (CDP). If you are selected for this program, you will become a Developing Consultant with us. This opportunity will challenge and motivate both your aptitude and attitude in Cyber Security. Successful completion of our program as a Developing Consultant may lead to a full-time offer as an entry-level Information Security Associate.

EEOC Statement

Tevora is proud to be an Equal Opportunity Employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, gender, gender identity or expression, pregnancy, sexual orientation, gender identity, national origin, age, protected veteran status, disability status, or other applicable legally protected characteristics.

We may use artificial intelligence (AI) tools to support parts of the hiring process, such as reviewing applications, analyzing resumes, or assessing responses and identifying potential inconsistencies or verification signals in application materials based on available information. These tools assist our recruitment team but do not replace human judgment. Final hiring decisions are ultimately made by humans. If you would like more information about how your data is processed, please contact us.