About The Clearing House: The Clearing House (TCH) is a banking association and payments company that is owned by the largest commercial banks in the United States. TCH owns and operates the core payments system infrastructure in the US and is currently working to modernize that infrastructure by launching a new, ubiquitous, real-time payment system. TCH is the only private-sector ACH and wire operator in the US, clearing and settling nearly $2 trillion in US dollar payments each day, representing half of all commercial ACH and wire volume. TCH has provided critical services to the banking industry since 1853, and today, our core products facilitate services including Direct Deposit of payroll, bill payments, and check image exchange.

About TCH Risk Management Office: The Risk Office advances risk management governance and oversight responsibilities in alignment with the Enterprise Risk Management Framework and incorporating the company’s Three Lines of Defense risk management model. The Risk Office currently consists of eight specific areas which include Enterprise Risk Management (ERM), Product Risk Management, Information Security (IS) Tech Risk Management, Systemic and Liquidity Risk Management (SLRM), Risk Assurance (RA), Vendor Risk Management (VRM), Model Risk Management (MRM), and Regulatory Affairs.

These areas are responsible for core risk management activities within TCH, covering the risks inherent to carrying out the company’s day-to-day operations, as well as its strategic and emerging risks. The Risk Office also has responsibility, in partnership with the Legal department, for coordinating TCH’s responses to regulatory oversight and fulfilling the requirements that stem from the company’s role as a Financial Market Utility (FMU) and its Systemically Important Financial Market Utility (SIFMU) designation as the operator of the Clearing House Interbank Payment Systems (CHIPS) system.

About TCH Tech & Information Security Risk Management Summer Internship Program: TCH Tech & IS Risk Management Summer Internship Program is a 10-week experience for rising college juniors and seniors interested in the field of Information Security Risk Management. Interns will be in Winston-Salem, NC. Over the course of the 10-week program, interns will have the opportunity to learn, support, and engage with IS topics and professionals. While working within one of our core Risk Management Office departments, each intern is assigned a hands-on project, which culminates in a presentation to Risk Office senior leadership. Opportunities for the 2026 Summer Internship Program will have a focus on, but not limited to, the following capabilities:

• Assist with the execution and coordination of the Technology & Information Security Risk functions related to the execution and sustainment of risk governance across the organization
• Assist in the performance of Technology & Information Security Risk Assessments across the organization to ensure risks are identified, assessed, quantified, adequately mitigated, and managed through the lifecycle of the product and/or service
• Assist in the performance of third-party vendor security risk assessment activities that include evaluation of vendor controls and practices
• Work with the first line of defense (FLOD) to plan, facilitate, and execute RCSA activities, including process mapping, risk identification, control assessment, and effectiveness testing
• Help enhance RCSA processes, data quality, documentation standards, and reporting outputs

Skills, Experience, and Qualifications Required:

• Currently enrolled, rising junior or senior, pursuing a bachelor’s degree in Information Security, Cybersecurity, Risk Management, or a related area
• Strong technical and PC skills (MS Office applications)
• Strong analytical skills and attention to detail
• Ability to work both independently and in a collaborative environment
• Demonstrated effective communication skills – both written and verbal

Qualifications Desired:

• Demonstrated knowledge of basic Technology & Information Security Risk concepts through proven research or lab work
• Prior experience or school related work with Information Security Risk, Information Security Engineering/Architecture, or technology projects
• Currently pursuing a degree in Management Information Systems, Computer Science, or any other related field

Physical demands and work environment: Work is generally sedentary in nature. The working environment is generally favorable. Lighting and temperature are adequate, and there are no hazardous or unpleasant conditions caused by noise, dust, etc. Work is generally performed within an office environment, with standard office equipment available.

Employees in this position will report to the office 3 days per week. Onsite work requirements may change at any time.