Digital Risk Management Intern

Job Overview

Genmab is seeking a motivated and detail-oriented Information Security Intern to support the company's digital risk and third-party security management initiatives. This internship offers hands-on experience in vendor risk assessment, digital risk tracking, and information security governance. The intern will play an active role in helping evaluate vendor security postures, maintain the digital risk register, and contributing to continuous improvement of Genmab's risk governance framework.

What You'll Do

• Assist with third-party due diligence reviews, including assessing vendor security documentation and learning how to identify control gaps
• Learn ServiceNow GRC module and then support risk owners in documenting risk treatment plans and tracking mitigation activities
• Learn to conduct independent analysis of the risk register to identify patterns, trends, or areas requiring attention
• Contribute to the enhancement of information security policies, processes, and controls as part of the governance framework
• Participate in learning sessions and team meetings to strengthen understanding of cyber risk management practices
• Independently research options to mitigate control gaps related to open critical or high risks
• Learn and then independently develop custom GPTs to enhance productivity

Required Qualifications, Capabilities And Skills

• The ideal candidate is a sophomore or junior working towards their undergraduate degree in Information Security, Computer Science, Cybersecurity, Risk Management or a related engineering field
• The ideal candidate should have the ability to be detail-oriented, eager to learn, and possess a foundational understanding of cybersecurity

Preferred Qualifications, Capabilities And Skills

• Some understanding of security tools and platforms such as GRC systems (e.g., ServiceNow GRC), vulnerability scanners (e.g., Tenable or Defender), and SIEMs (e.g., Sentinel) would be a plus
• Prior knowledge and ability to interpret security reports (e.g., SOC 2 Type II, penetration testing summaries, vulnerability scans etc.) would be a plus

General Intern Information – Date/Location/Schedule

Internships will take place over 10 weeks from June – August 2027. This role will be based in Princeton, NJ and operate on a required hybrid schedule – 3 days in the office and 2 days remote per week. This role is not eligible for work visa sponsorship at the time of the application or in the future.