Intern - Governance, Risk, And Compliance

POSITION PURPOSE

The IT Intern - Governance, Risk, and Compliance will directly support the IT Enterprise Systems Governance Risk and Compliance (GRC) team in performing a variety of governance processes, risk management activities, audits, and compliance assurance efforts, to align IT with business goals while managing risks and meeting compliance requirements.

WORK SCHEDULE

• Interns will work full-time (40 hours/week) during the summer months, starting mid-May through early September on a hybrid basis with some remote capabilities following company policy.
• Upon successful completion of the summer term, additional availability to work part-time (15-20 hours/week) during the fall and spring semesters will be available based on business needs.

DUTIES/RESPONSIBILITIES

• Support governance and compliance activities by assisting in the development, recommendation, enhancement and implementation of basic processes and standards in support of technology designs, plans, controls, and procedures.
• Engage with IT project intake team and business leads to conduct solution standards and non-functional requirements assessments. Include standard security and data protection language in contract review process where applicable.
• Engage with business areas, IT, vendors, and management on information risk strategy and compliance goals with new implementations or technology environment changes.
• Publish, update, and maintain MGE's Standards and IT non-functional requirements, in collaboration with applicable IT teams.
• Assist with vendor attestation reviews and assessments, documenting and communicating risk and identifying user entity controls and assurance.
• Conduct routine assessments and audits, including risk assessments and project/control audits, and report results.
• Assist with MGE Standards Exception Management process, identifying mitigation options and evaluating the risk of deviations of Company Policy or standards.
• Assist with IT risk assessments (i.e., pen tests) and Risk Registry processes.
• Support of GRC services, including identifying opportunities for improvement and efficiencies and reducing technology risk through analytics and automation tooling.
• Perform routine audits. Drive and monitor remediation efforts with applicable teams to closure.

QUALIFICATIONS

• High school degree or equivalent; must be enrolled in an accredited university or college program, preferred area of studies includes Risk Management, Cybersecurity, Information Technology, Computer Science, International Relations/Affairs, Regional Studies, Audit, or related field.
• Experience with Microsoft Office and O365 Suite. Highly adaptable to understanding and leveraging new technologies and applications.
• Highly organized and flexibility to manage workload across multiple implementations simultaneously.
• Strong analytical and problem-solving skills to enable effective problem and risk resolution.
• Energetic and eager to tackle new projects and ideas.
• Strong business acumen, communication, and interpersonal skills.
• Demonstrated analytical, problem solving, and critical thinking skills.
• Must be able to work effectively independently and within a team environment.

BENEFITS OF AN INTERNSHIP WITH MGE

• Local employer - accessible via bike paths, bus lines, and we have free on-site parking
• Hands-on projects - meaningful projects and experience across business functions
• Competitive pay - interns are paid fairly for the work they contribute
• Opportunity for full-time employment - high conversion rate from internship to full-time employment after graduation

ABOUT THE ORGANIZATION

MGE is a community energy company dedicated to planning and providing reliable energy that balances the needs and values of those we serve. MGE has been in the top three most reliable electric utilities in the nation for the past 14 years. MGE is an investor-owned, government-regulated public utility that generates and distributes electric power to 157,000 customers and purchases and distributes natural gas to 166,000 customers in south-central and western Wisconsin. MGE's parent company is MGE Energy, Inc., a public utility holding company. Its common stock trades on the NASDAQ Stock Market. For more information, visit mge.com and mgeenergy.com.

JOB LOCATION

The position is hybrid, and office days are in downtown Madison, Wisconsin, where MGE is an active participant in community efforts to preserve the area's extraordinary quality of life. Madison is the capital of Wisconsin and a major research and technology city. The area's strong quality-of-life factors include a vibrant economy; urban, suburban, and rural living options; nationally acclaimed public university and public secondary school systems; rich cultural, recreational, and outdoor offerings; and a favorable cost of living.

For more information about Madison's advantages as a place to live, please visit www.thrivehere.org.

AA/EOE-Minorities/Females/Gender Identity/Sexual Orientation/Disabled/Vets