Governance Risk Compliance/Information Security Intern Summer 2025 – SkySail (Remote)

Exciting Summer 2025 internship opportunity! 

Join our SkySail Practice! 

Milliman’s SkySail Practice is looking for a Governance, Risk, and Compliance (GRC)/Information Security Intern to support our GRC efforts and help enhance our security posture. This role is ideal for a student or recent graduate interested in cybersecurity, audit/compliance, and risk management.

As an intern, you will gain hands-on experience in security frameworks like SOC2, ISO 27001, and HITRUST, assist with security audits, and contribute to policy development. You will also have the opportunity to work alongside multiple departments and team members to complete GRC efforts.

Who We Are   

Milliman Skysail is a consulting and software-as-a-service (SaaS) unit of Milliman that leads the way in pharmacy claims analysis and reporting. SkySail Rx was founded in 2015 and acquired by Milliman in 2021. We are a fast-growing team of around fifty expert individual contributors. We specialize in analyzing pharmaceutical claims, data engineering, and application development. We place a strong emphasis on individual contribution and continuous learning.

Our Internship Provides You 

• Challenging assignments with practical on the job experience 
• Exposure to real-world security audits and risk assessments
• Hands-on experience with GRC tools, frameworks, and policies
• Understanding of cloud security and other SaaS tools and their best compliance practices
• Work alongside some of the leading experts within the healthcare industry, to include Milliman consultants and those in senior management 
• Mentorship and learning opportunities from experienced information security professionals  
• Development of your technical skills with platforms such as AWS, JIRA, Bitbucket and Vanta.
• Attendance at professional staff meetings and department meetings 
• Mentorship from experienced security and engineering professionals
• Competitive pay 
• Prospect of securing a full-time position with Milliman SkySail

Job Responsibilities 

• Assist in security related audits and other security compliance initiatives
• Support risk assessments, third-party vendor reviews, and internal security audits
• Help develop, update, and maintain security policies, procedures, and documentation
• Monitor compliance with security controls and assist with remediation efforts
• Research and track regulatory changes impacting information security and privacy
•  Work with security teams to improve various tasks that are outlined

Minimum requirements 

• Currently pursuing a bachelor’s or master’s degree, or recently completed a degree in Cybersecurity, Information Security, Finance, Law, Computer Science or a related field of study  
• Interest in compliance, privacy, governance, and security
• Excellent written and verbal communication skills
• Strong analytical and problem-solving skills

Competencies and Behaviors that Support Success in this Role 

• Familiarity with cloud security (AWS, Azure, GCP)
• Basic experience with risk assessments, policies, and/or general audits
• Good academic standing
• Previous internship or relevant work experience
• Leadership experience and involvement in extra-curricular activities
• A detail-oriented self-starter with an entrepreneurial spirit inspired to contribute to the success of any project
• Can complete project deliverables, meet deadlines, and ensure compliance with quality procedures
• Strong time management skills 
• Ability to work independently and in a team environment 
• Eager to learn and work hard 
• Demonstrates integrity in all functions of work   

The Team  

Milliman is one of the leading experts in healthcare financing and delivery. We advise clients on a wide range of issues—from assessing the impact of healthcare reform on organizations or populations to streamlining operations while advancing the quality of patient care. Our consulting work is supported by a powerful toolkit of data analytics solutions and informed by the most trusted, comprehensive set of cost guidelines in the industry.  

Through a team of professionals ranging from actuaries to clinicians, technology specialists to plan administrators, we offer unparalleled expertise in employee benefits, investment consulting, healthcare, life insurance and financial services, and property and casualty insurance.  

Location and Schedule: This is a remote, part-time, summer internship, which allows up to 29 hours per week. This position is from June through August 2025 with the opportunity to extend based on performance.

Compensation:  The range is $19 - $36 per hour, depending on a combination of factors, including but not limited to education, relevant work experience, qualifications, skills, certifications, location, etc.

#LI-CS1 #LI-REMOTE

Benefits:

• When an intern, temporary, or seasonal employee reaches 1,000 hours worked within 12 consecutive months, they become eligible for a 401(k) plan with matching program and profit-sharing contribution
• Employee Assistance Program (EAP)
• Paid Time Off (PTO) starts accruing on the first day of work and can be used for any reason. Interns, Temporary, and Seasonal Employees will earn PTO each pay period, with an accrual rate of 1 hour for every 30 hours worked
• Commuter Program, which allows you to use pre-tax dollars to pay for your parking or public transit expenses to get to and from work. You may utilize this benefit any time throughout the year and funds will be available the first of the month following your first contribution.

 This job posting is expected to close on June 19, 2025.

All qualified applicants will receive consideration for employment, without regard to race, color, religion, sex, sexual orientation, gender identity, national origin, disability, or status as a protected veteran.

Equal Opportunity Employer/Protected Veterans/Individuals with Disabilities

The contractor will not discharge or in any other manner discriminate against employees or applicants because they have inquired about, discussed, or disclosed their own pay or the pay of another employee or applicant. However, employees who have access to the compensation information of other employees or applicants as a part of their essential job functions cannot disclose the pay of other employees or applicants to individuals who do not otherwise have access to compensation information, unless the disclosure is (a) in response to a formal complaint or charge, (b) in furtherance of an investigation, proceeding, hearing, or action, including an investigation conducted by the employer, or (c) consistent with the contractor’s legal duty to furnish information. 41 CFR 60-1.35(c)