Description

What Your Job Will Be Like

The CIO Portfolio Management Office is seeking motivated undergraduate interns to support our third-party risk management and compliance functions. You will help evaluate and monitor external service providers, contribute to vendor due-diligence activities, and assist in safeguarding Sandia's information systems and organizational assets.

On any given day, you may be called on to:

• Support third-party risk assessments: collect and analyze vendor questionnaires, compliance and security documentation, and audit reports (e.g., SOC, ISO, NIST).
• Verify contractual security clauses, track service requests, and maintain External IT Service records.
• Monitor ongoing compliance: collaborate with suppliers and internal stakeholders to validate that security controls are maintained and documented.
• Develop and maintain risk-management artifacts: draft risk assessment memos, control matrices, and executive-level dashboards using Power BI or similar tools.
• Participate in compliance reviews and audits: prepare evidence packages, coordinate interviews, and summarize findings to facilitate risk-based decisions.
• Liaise between business units, IT teams, and external partners to clarify requirements, escalate issues, and ensure customer proficiency in Governance, Risk, and Compliance (GRC) activities.
• Contribute to policy and procedure updates: research industry best practices, draft guidance documents, and support training materials.

Salary Range

At Sandia, we value the important work done by our interns and its contribution to National Security. Because of this, our interns earn competitive pay rates. Our pay structure is based on earned credit hours, classification, and degree level. Your pay rate will be determined during the hire process and included in your offer package. You can view the Intern Pay Rate chart here .

Qualifications We Require

You bring the confidence and skills to be eligible for the job by meeting these minimum requirements:

• Currently attending and enrolled full time in a related accredited undergraduate program
• Minimum cumulative GPA of 3.0/4.0
• Ability to work up to 25 hours per week during the academic year, and up to 40 hours per week during the summer
• Ability to secure and maintain a U.S. security clearance which requires U.S. citizenship

Note: If you have not earned a HS diploma or equivalent, please apply to a high school intern position.

Qualifications We Desire

• Pursuing a B.S. degree in Information Security or Business Administration with a concentration in Management Information Systems or related field
• Familiarity with GRC and Security Control frameworks (e.g., NIST SP 800-53, ISO 27001, CIS Controls).
• Exposure to data visualization tools (Power BI, Tableau) and basic scripting or database querying (Python, SQL).
• Knowledge of cybersecurity concepts, information assurance, vulnerability management, and secure configuration standards.
• Excellent verbal and written communication skills with the ability to adapt messaging for both technical and non-technical audiences (customers, suppliers, engineering, integrated supply chain, program management).

Posting Duration

This posting will be open for application submissions for a minimum of seven (7) calendar days, including the ‘posting date’. Sandia reserves the right to extend the posting date at any time.

About Our Team

CIO Portfolio Management Office 9751 has the responsibility for employing methods, policies, metrics, and software tools to continuously optimize Sandia's IT organizational activities and processes. That work involves serving as a primary point of contact for IT with various entities including the Sandia Field Office (SFO), the Department of Energy and NNSA headquarters, and other national laboratories across the complex.

About Sandia

Sandia National Laboratories is the nation’s premier science and engineering lab for national security and technology innovation, with teams of specialists focused on cutting-edge work in a broad array of areas. Some of the main reasons we love our jobs:

• Challenging work with amazing impact that contributes to security, peace, and freedom worldwide
• Extraordinary co-workers
• Some of the best tools, equipment, and research facilities in the world
• Career advancement and enrichment opportunities
• Flexible work arrangements for many positions include 9/80 (work 80 hours every two weeks, with every other Friday off) and 4/10 (work 4 ten-hour days each week) compressed workweeks, part-time work, and telecommuting (a mix of onsite work and working from home)
• Generous vacation, strong medical and other benefits, competitive 401k, learning opportunities, relocation assistance and amenities aimed at creating a solid work/life balance*

World-changing technologies. Life-changing careers. Learn more about Sandia at: http://www.sandia.gov

*These benefits vary by job classification.

Security Clearance

Sandia is required by DOE to conduct a pre-employment drug test and background review that includes checks of personal references, credit, law enforcement records, and employment/education verifications. Applicants for employment need to be able to obtain and maintain a DOE L-level security clearance, which requires U.S. citizenship. If you hold more than one citizenship (i.e., of the U.S. and another country), your ability to obtain a security clearance may be impacted.

Applicants offered employment with Sandia are subject to a federal background investigation to meet the requirements for access to classified information or matter if the duties of the position require a DOE security clearance. Substance abuse or illegal drug use, falsification of information, criminal activity, serious misconduct or other indicators of untrustworthiness can cause a clearance to be denied or terminated by the DOE, resulting in the inability to perform the duties assigned and subsequent termination of employment.

EEO

All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, sexual orientation, gender identity, national origin, age, disability, or veteran status and any other protected class under state or federal law.

NNSA Requirements for MedPEDs

If you have a Medical Portable Electronic Device (MedPED), such as a pacemaker, defibrillator, drug-releasing pump, hearing aids, or diagnostic equipment and other equipment for measuring, monitoring, and recording body functions such as heartbeat and brain waves, if employed by Sandia National Laboratories you may be required to comply with NNSA security requirements for MedPEDs.

If you have a MedPED and you are selected for an on-site interview at Sandia National Laboratories, there may be additional steps necessary to ensure compliance with NNSA security requirements prior to the interview date.