Technology Risk Intern
About the job
- Student status or a master's degree graduate; preferred fields are computer science or economics with computing elements.
- Effective time-management skills.
- Very good Polish proficiency (minimum B2).
- Fluent English proficiency (minimum B2/C1).
- Availability for at least 30 hours per week.
- Participate in audit and advisory projects involving identification and analysis of IT risks.
- Define and implement IT control mechanisms.
- Assess maturity of IT and security processes.
- Conduct IT audits and security reviews.
- Perform SOC R and WebTrust attestations.
- Audit and assess the security of new technologies, including AI solutions.
- Assess compliance with regulatory requirements, including DORA, Polish Financial Supervision Authority recommendations, European Banking Authority guidelines, GDPR, and the National Cybersecurity System Act.
- Assess compliance with standards and frameworks, including ISO 27001, ISO 22301, NIST, COBIT, and TISAX.
- Work on business continuity projects.
- Audit and assess the security of cloud computing solutions.
- Work with a team using AI agents as an integral part of the audit process, analyzing financial data, searching regulations, and using tools to improve audit quality, consistency, and efficiency.
- Knowledge of ITIL, COBIT, and ISO/IEC 27001.
- Experience at a Big Four firm or financial institution in security, internal audit, or compliance.
- Knowledge and practical experience in personal data protection in information systems.
- Knowledge of the financial sector, business processes, and regulations related to security and IT.
- Practical knowledge of new technologies, including RPA, AI, blockchain, and cloud computing.
- Conversational German proficiency.
About the company
EY (Ernst & Young) provides professional services at a global scale, offering consulting, assurance, tax, and transaction advisory services. It serves clients across industries such as technology, media, real estate, hospitality, and construction. Instead of selling a single product, EY works with clients through tailored engagements where cross-disciplinary teams analyze challenges, design strategies, perform audits, help with tax planning, and assist with mergers or divestitures. What sets EY apart is its worldwide reach and integrated service model, industry-specific expertise, and focus on responsible business practices like sustainability, cybersecurity, and workforce flexibility. EY’s goal is to help organizations improve performance, manage risk, and achieve sustainable growth while building a better working world.
Company Size
5,001-10,000
Company Stage
N/A
Total Funding
N/A
Headquarters
Boston, Massachusetts
Founded
1991
Get referred to Ernst & Young
See people who can refer or advise you
Simplify's Take
What believers are saying
- EY.ai Agentic for Sales launched March 2, 2026 with Snowflake and Canva.
- EY uses client-zero deployments, scaling Copilot across 400,000 people by May 2026.
- EY’s 2026 AI assurance push monetizes client demand for governance, controls, and risk reviews.
What critics are saying
- Sabah filed RM2.4 billion audit-negligence claims against EY on July 30, 2026.
- EY set aside £188 million in March 2026 after NMC, Shell, and Made.com scrutiny.
- Repeated audit failures can destroy trust, trigger client defections, and shrink the franchise permanently.
What makes Ernst & Young unique
- EY Canvas processes 1.4 trillion journal-entry lines across 160,000 global audits.
- EY-Microsoft invested US$1b+ in May 2026 to industrialize enterprise AI delivery.
- EY launched agentic audit AI on April 7, 2026, spanning Assurance and AI assurance.
Help us improve and share your feedback! Did you find this helpful?
Benefits
- Professional Development Budget
- Flexible Work Hours
- Remote Work Options