Enterprise Risk Management Intern

The Executive Office of Technology Services and Security (EOTSS) is the lead enterprise technology organization for the Commonwealth of Massachusetts. Charged with driving the ongoing alignment of business and technology across the Commonwealth's Executive Branch, EOTSS oversees and manages the enterprise technology, digital infrastructure and services, as well as the Commonwealth Security Operations Center and an enterprise Standard Operating Environment that includes an information security and risk management framework for over 125 state agencies and over 43,000 state employees.

We directly serve our constituents by providing digital services and tools that enable taxpayers, drivers, businesses, visitors, families and other citizens to do business with the Commonwealth in a way that makes every interaction with government easier, faster, and more secure.

Our Mission:
We provide technology leadership across the Commonwealth to enhance the quality of public service and foster positive community outcomes.

The EOTSS Enterprise Risk Management (ERM) Program is seeking an Enterprise Risk Management Intern who is enthusiastic and motivated individual to assist the continuing roll-out and maintenance of a compliance and security program across EOTSS and executive branch offices. The position requires a balance of compliance and security program experience along with exceptional project and task management.

As a member of the ERM team, the Enterprise Risk Management Intern will significantly contribute to the Commonwealth-wide risk management program ensuring compliance with all relevant legislative, regulatory, statutory, and contractual requirements related to Information Security. The incumbent will collaborate with various members and levels of the organization to ensure we are reviewing and updating our applications, systems, user lists, and vendor reviews on a regular periodic and continuing basis.

The primary work location for this role will be One Ashburton Place, Boston, Massachusetts 02108. The work schedule for this position is Monday through Friday, 9AM to 5PM EST. This position would be expected to follow a remote model of reporting to work. Attendance in our offices at One Ashburton Place, Boston, MA, and/or other Boston locations may be required from time to time. The work schedule is subject to change based on operational needs.

The duration of this summer internship is from Monday, June 1st through Friday, August 7th, 2026.

Duties & Responsibilities:

* Process ERM program risk assessment requests and non-compliance reports.

* Assist ERM management to document program policy and procedure.

* Assist tracking of contact and follow up with numerous individuals for various project initiatives.

* Track and document responses from multiple sources in a timely and succinct manner.

* Meticulously maintain continually changing program and project documentation; to include progress tracking documentation.

* Assist in the creation of multiple and varied reports for numerous recipients with differing requirements.

* Assist with ongoing initiative to automate current manual tracking tools.

* Ability to build and maintain positive working relationships across all levels and functional areas.

* Plan and schedule program deliverables, goals, milestones.

* Other responsibilities as assigned.

Preferred Knowledge, Skills & Abilities:

* Demonstrate ability to multitask, prioritize, and meet deliverables for various and fluid responsibilities and initiatives.

* Strong understanding of enterprise risk required.

* A concentration in IT, Network infrastructure, software application and software vendor disciplines desired.

* Exceptional organizational skills including acute attention to detail especially involving the gathering, updating, tracking, and reporting of data from multiple sources.

* Excellent communication skills as this job will require interaction with all levels of the Secretariat, including senior management, both verbally and in writing.

* Ability to maintain a consistent and timely follow through of all requests requiring a response from various members and all levels of the organization.

* Ability to draft,…