Resp & Qualifications

PURPOSE:

The Risk Management Analyst Intern will gain exposure and support operational risk programs designed to ensure the identification and mitigation of risks; the management of controls and safeguards to minimize the impact of potential and existing risks affecting the organization; compliance with laws, regulations, standards, policies/procedures, and organization frameworks; and monitoring and effectuation of remediation of issues identified.

This is a year-round internship. The ideal candidate is someone who can commit to work throughout the year (Spring/Fall - minimum 15-20 hours per week and 30-40 hours per week in the Summer). The anticipated start date for our Fall cohort will be in October 2026.

ESSENTIAL FUNCTIONS:

Help to identify issues and concerns, provide the appropriate level of support, and proactively manage risk, control efficiency and effectiveness, and develop process improvement opportunities to improve the enterprise risk culture. Track and monitor evolving risks and threats maintained within the centralized risk register, including third party risks, and collaborate with business owners to track risk and threat mitigation strategies. Collaborate with the Risk team and business owners to identify and contribute to a centralized inventory of processes, controls, process-level risks, and areas for improvement to ensure efficiency in the control and process environment across the enterprise.

As a part of this team you will help to provide advisory support in the completion of divisional risk assessments. Govern and support associates in the completion of third party risk assessments and control self-assessments to ensure the adequacy of controls in place to safeguard the organization, including tracking, monitoring, and managing issues identified. Maintain documentation for re-performance ability, including leveraging the Governance Risk and Compliance (GRC) tool and repository (e.g., Optro). Contribute to the repository of best practices and tools/accelerators related to third party risk assessments, operational risk assessments, and control self-assessments.

Support maintenance of the centralized repository for third party relationships including accountable business owners, inherent risk, and tier for each respective third party relationship. Provide support to Integrated Compliance teams to ensure compliance with the Third Party Risk Management (TPRM) framework and standards to ensure that controls in place surrounding data protection, privacy, and access (among other areas) are compliant with corporate standards and risk appetite. Support completion of due diligence on third party controls in place both corporately and with the third party, in collaboration with subject matter resources across all relevant risk domains to determine residual risk of third party relationships.

Collaborate with Integrated Compliance teams and key subject matter resources across all relevant risk domains to define and establish frameworks (e.g., Compliance, Risk Assessment, Risk Governance) and definitions for key data elements. Maintain frameworks to meet industry standards (e.g., NIST, HITRUST). Contribute to the development of enterprise-wide training and awareness materials that educate associates and leadership on best practices, pervasive operational risk management issues, risk management tools and processes, and lessons learned.

Qualifications Required:

This position requires an individual working towards a Bachelors degree from an accredited college or university. We are looking for students at the rising Junior or Senior level seeking degrees in Finance or Risk Management with a cumulative GPA of 3.0 or above.

Required Abilities/Skills:

• Ability to work independently and as part of a team.
• Must be reliable, hardworking and have a strong work ethic.
• Excellent interpersonal skills and the ability to positively interface with and establish and maintain effective working relationships with internal staff and external clients.
• Attention to detail and excellent analytical and problem-solving skills.
• Excellent written and verbal communication skills.
• Excellent organizational skills and ability to multi-task and reprioritize work, as necessary.
• Ability to assist in performing assessments, including compliance & legal reviews, contract reviews, testing controls, and developing & reviewing assessment reports.
• Understands and possesses general project management skills relevant to performing assessment functions and responsibilities.

Salary Range: $19,760 - $26,000

Salary Range Disclaimer

The hire range posted is an annual rate. All intern positions will be paid hourly.

Equal Employment Opportunity

CareFirst BlueCross BlueShield is an Equal Opportunity (EEO) employer. It is the policy of the Company to provide equal employment opportunities to all qualified applicants without regard to race, color, religion, sex, sexual orientation, gender identity, national origin, age, protected veteran or disabled status, or genetic information.

Federal Disc/Physical Demand

Note: The incumbent is required to immediately disclose any debarment, exclusion, or other event that makes him/her ineligible to perform work directly or indirectly on Federal health care programs.

PHYSICAL DEMANDS:

The associate is primarily seated while performing the duties of the position. Occasional walking or standing is required. The hands are regularly used to write, type, key and handle or feel small controls and objects. The associate must frequently talk and hear. Weights up to 25 pounds are occasionally lifted.

Sponsorship in US

Must be eligible to work in the U.S. without Sponsorship

#LI-NW1