Position Overview:
· Position Type: Summer Internship – Seasonal, Full-Time
· Location: Novi, Michigan – In-Office
· Reports To: On-site Lead IT Administrator
· Employment is contingent upon the successful completion of a pre-employment background check; a clear background check is required prior to the start date
· Candidates must disclose at the time of application whether they would require a license or export authorization under the International Traffic in Arms Regulations (ITAR) to view or handle ITAR-regulated information, materials, or technical data
Policy Review and Implementation:
· Review existing IT and cybersecurity policies against the requirements of NIST SP 800-171 Rev. 3, CMMC Level 1, and CMMC Level 2 control frameworks
· Identify policy gaps and deficiencies and document findings with supporting evidence and recommended remediation actions
· Assist in drafting, updating, and formalizing IT and cybersecurity policies, procedures, and standards in accordance with applicable control requirements
· Support the implementation of approved policy changes across systems, user documentation, and operational workflows
· Maintain a policy compliance tracking register to monitor implementation status and outstanding items
· Research NIST SP 800-171 Rev. 3 control families and CMMC requirements and summarize findings for review by the Global IT Lead Administrator
· Assist in the configuration and documentation of technical controls aligned with NIST and CMMC requirements, including access control, audit and accountability, system and communications protection, and incident response
Reporting and Communication:
· Prepare and submit a written weekly progress report to the Global IT Lead Administrator detailing tasks completed, work in progress, and planned activities for the coming week
· Proactively communicate obstacles, roadblocks, or areas of complexity encountered during policy implementation activities
· Maintain organized records and documentation to support audit readiness and knowledge transfer
· Participate in scheduled check-ins and meetings with the Global IT Lead Administrator and other relevant team members
· Escalate technical or compliance concerns in a timely manner in accordance with guidance provided by the supervising administrator
Security and Compliance:
· Comply with all applicable company IT security policies, access control requirements, and confidentiality obligations throughout the duration of the internship
· Handle all Controlled Unclassified Information (CUI) and sensitive technical data in accordance with applicable federal regulations and company policy
· Comply with ITAR requirements as applicable based on the candidate’s disclosed export authorization status
· Maintain appropriate data handling practices and report any actual or suspected security incidents to the Global IT Lead Administrator immediately
Qualifications:
· Currently enrolled in or recently completed an Associate’s or Bachelor’s degree program in Information Technology, Information Security, Cybersecurity, Computer Science, or a closely related field
· Demonstrated coursework, project experience, or practical knowledge in cybersecurity, IT policy, risk management, or compliance frameworks
· Familiarity with NIST SP 800-171, NIST Cybersecurity Framework (CSF), CMMC Level 1 and/or Level 2 requirements is strongly preferred
· Understanding of fundamental IT infrastructure concepts including networking, access management, endpoint security, and system hardening
· Strong written communication skills with the ability to produce clear, organized technical documentation and reports
· Ability to work independently with guidance and to manage multiple tasks in a structured, deadline-driven environment
· Professional, detail-oriented, and capable of handling sensitive and confidential information with discretion
· Industry certifications such as CompTIA Security+, CompTIA A+, or CompTIA Network+ are a plus but not required
Pay: $2,000.00 per month
Education:
Work Location: In person