Job Title: Summer Associate, Information Security

Department: Information Technology

Reports To: Vice President, Information Security Officer

FLSA Code: Non-Exempt

Estimated Salary: $33/hour

Job Summary:

Cohen & Steers is currently seeking a highly motivated Summer Associate to join the Information Security team within the Information Technology department, based in our New York office. The Summer Associate will rotate across the core functions of the Information Security program (security operations and monitoring, governance, risk and compliance, third-party risk management, and vulnerability management and access management) to gain hands-on exposure to how a global asset manager protects its data, systems and clients. Cohen & Steers is committed to an inclusive culture, valuing diversity in support of our people and clients.

Major Responsibilities/Activities:

Assist the IT Support team with triage and investigation of alerts from the firm's Security Operations Center
Assist in security awareness training and phishing simulation campaigns for 400+ users across our New York office, six global offices and remote staff
Assist with vulnerability management by reviewing scan output, tracking remediation status with system owners, and helping maintain patch compliance reporting
Support governance, risk and compliance activities including drafting and updating security policies and standards, gathering evidence for internal and external audits, and assisting with periodic user access reviews
Assist the third-party risk management program by reviewing vendor security questionnaires and SOC 2 reports
Help develop new and enhance existing security metrics reported to the COO in the Quarterly IT Metrics report
Assist with planning, coordinating, and executing cyber resiliency testing

Minimum Requirements:

Undergraduate student with an expected graduation date in 2028, pursuing a degree in cybersecurity, information systems, computer science, risk management or a related field
Demonstrated interest in information security, evidenced through coursework, certifications, competitions or personal projects
Foundational understanding of core security and technology concepts such as networking, operating systems, authentication and common attack types
Proficient in Microsoft Office applications, particularly Excel, and comfortable working in Microsoft Windows
Strong organizational skills and strong written communication skills
Sound judgment and discretion in handling confidential and sensitive information
Must be able and willing to work in a team-oriented environment
Ability to multi-task with superior attention to detail
Demonstrates inclusive behaviors in support of a culture that values diverse perspectives
Able to meet the firm's work arrangement policy in our New York City office (5 days in-office)

Note: This job description reflects management's assignment of essential functions; it does not prescribe or restrict the tasks that may be assigned. The job title or duties and responsibilities may be changed by the Company at any time.