Summer Associate, Information Security

Job Title: Summer Associate, Information Security

Department: Information Technology

Reports To: Vice President, Information Security Officer

FLSA Code: Non-Exempt

Estimated Salary: $33/hour

Job Summary

Cohen & Steers is currently seeking a highly motivated Summer Associate to join the Information Security team within the Information Technology department, based in our New York office. The Summer Associate will rotate across the core functions of the Information Security program (security operations and monitoring, governance, risk and compliance, third-party risk management, and vulnerability management and access management) to gain hands-on exposure to how a global asset manager protects its data, systems and clients. Cohen & Steers is committed to an inclusive culture, valuing diversity in support of our people and clients.

Major Responsibilities/Activities

• Assist the IT Support team with triage and investigation of alerts from the firm's Security Operations Center
• Assist in security awareness training and phishing simulation campaigns for 400+ users across our New York office, six global offices and remote staff
• Assist with vulnerability management by reviewing scan output, tracking remediation status with system owners, and helping maintain patch compliance reporting
• Support governance, risk and compliance activities including drafting and updating security policies and standards, gathering evidence for internal and external audits, and assisting with periodic user access reviews
• Assist the third-party risk management program by reviewing vendor security questionnaires and SOC 2 reports
• Help develop new and enhance existing security metrics reported to the COO in the Quarterly IT Metrics report
• Assist with planning, coordinating, and executing cyber resiliency testing

Minimum Requirements

• Undergraduate student with an expected graduation date in 2028, pursuing a degree in cybersecurity, information systems, computer science, risk management or a related field
• Demonstrated interest in information security, evidenced through coursework, certifications, competitions or personal projects
• Foundational understanding of core security and technology concepts such as networking, operating systems, authentication and common attack types
• Proficient in Microsoft Office applications, particularly Excel, and comfortable working in Microsoft Windows
• Strong organizational skills and strong written communication skills
• Sound judgment and discretion in handling confidential and sensitive information
• Must be able and willing to work in a team-oriented environment
• Ability to multi-task with superior attention to detail
• Demonstrates inclusive behaviors in support of a culture that values diverse perspectives
• Able to meet the firm's work arrangement policy in our New York City office (5 days in-office)

Note: This job description reflects management's assignment of essential functions; it does not prescribe or restrict the tasks that may be assigned. The job title or duties and responsibilities may be changed by the Company at any time.