Information Security Intern Jobs in Oregon
Information Security Intern jobs in Oregon concentrate in Portland, Beaverton, and Eugene, where technology companies, financial institutions, and university research programs generate consistent openings for students and early-career candidates. Nike, Intel, and Providence Health are among the established Oregon employers that regularly bring on information security interns across network security, vulnerability assessment, and compliance and risk management. Oregon's concentration of semiconductor manufacturing and healthcare IT creates particular demand for interns with exposure to industrial control systems security and HIPAA-related frameworks. See the openings below and apply to the ones that match your experience.
Find JobsOverview
Showing 5 of 7+ Information Security Intern jobs
ABOUT SOTHEBY'S
Established in 1744, Sotheby's promotes access and ownership of exceptional art and luxury objects through auctions, private sales and retail. Our deep expertise across 70 selling categories is supported by a leading technology platform and a global network of specialists spanning 40 countries. Selling categories include Contemporary Art, Modern and Impressionist Art, Old Masters, Chinese Works of Art, Jewelry, Watches, Wine and Spirits and Design, as well as collectible cars and real estate through RM Sotheby's and Concierge. Sotheby's Financial Services is a leading art lender and provides capital solutions for collectors around the world, having originated more than $12 billion in loans since its inception. Sotheby's new global headquarters is now open at the iconic Breuer building at 945 Madison Avenue in New York City.
THE ROLE
As an Information Security Manager, you will be responsible for executing major components of Sotheby's information security strategy, as well as helping to define it. Reporting directly to the CISO, you will be the driving force behind accomplishing key initiatives, while working closely with managers across the globe to balance achieving business objectives with managing risk.
Rather than being confined to a narrow role, you will be a utility player, moving between different areas as needed, for example: performing risk assessments and security reviews, procuring infosec tools, managing projects, drafting policies and processes, conducting risk management meetings, designing controls, overseeing auditors, and leading incident response. And as a key part of a team dedicated to continuous improvement, you will help us get better every day.
You obsess over getting the key facts nailed down. You have an attention to detail that some might call "extreme". And you recognize the daunting challenge of managing information security at a historic and globally recognized brand, but that challenge excites you.
RESPONSIBILITIES
- Work with IT and business unit managers to drive security initiatives to completion
- Lead business continuity and disaster recovery planning and preparation projects
- Lead internal and external security audits, acting as the primary point of contact for auditors
- Draft, update, and enforce information security policies, processes, and standards
- Conduct third-party vendor risk assessments and internal security risk assessments
- Maintain risk registers, compliance dashboards, and reports for senior leadership
- Audit internal systems to verify compliance with mandatory security controls
- Develop policies, processes, and risk assessments aligned to top frameworks such as CIS, NIST, ISO 27001, and SOC 2
- Crosswalk and harmonize controls across multiple compliance frameworks
- Document security requirements, support control implementation, and help track remediation progress
- Build risk registers, support assessments, and monitor remediation progress
- Plan, lead, and execute control validation and testing activities across various domains (e.g., access management, vulnerability management, incident response, data protection)
- Mentor junior analysts and engineers, providing guidance on control validation methodologies and best practices while fostering a culture of accountability
- Document control issues and collaborate with stakeholders to develop remediation recommendations
- Develop and enhance control testing methodologies, procedures, and reporting mechanisms
REQUIRED QUALIFICATIONS
- At least five years of hands-on experience in information security roles
- Bachelor's or Master's in computer science, engineering, or cybersecurity
- Deep understanding of information security fundamentals
- Proven ability to manage complex projects from conception to completion
- Ability to explain complex technical risks in simple, business-friendly language
- Ability to communicate clearly, precisely, and concisely
PREFERRED QUALIFICATIONS
- At least one active credential, such as CISA, CRISC, CISM, or CISSP
- Experience performing risk assessments across diverse systems including SaaS and mobile
- Deep knowledge of frameworks and standards such as CIS, ISO 27001, and NIST
- Experience leading incident response through a cyberattack or data breach
To view our Candidate Privacy Notice for the US, please click here.
To view our Candidate Privacy Notice for the UK, Hong Kong, France and Switzerland, please click here.
The Company is an equal opportunity employer and considers all applicants for employment without regard to race (including, without limitation, traits historically associated with race, such as natural hair, hair texture, and protective and treated or untreated hairstyles), color, creed, religion, sex, sexual orientation, marital or civil partnership/union status, national origin, age, disability, pregnancy, genetic predisposition, genetic information, reproductive health decision, sexual orientation, gender identity or expression, alienage or citizenship status, domestic violence victim status, military or veteran status, or any other characteristic protected by federal, state/province or local law. The Company complies with applicable state and local laws prohibiting discrimination in employment in every jurisdiction in which it operates.
ABOUT SOTHEBY'S
Established in 1744, Sotheby's promotes access and ownership of exceptional art and luxury objects through auctions, private sales and retail. Our deep expertise across 70 selling categories is supported by a leading technology platform and a global network of specialists spanning 40 countries. Selling categories include Contemporary Art, Modern and Impressionist Art, Old Masters, Chinese Works of Art, Jewelry, Watches, Wine and Spirits and Design, as well as collectible cars and real estate through RM Sotheby's and Concierge. Sotheby's Financial Services is a leading art lender and provides capital solutions for collectors around the world, having originated more than $12 billion in loans since its inception. Sotheby's new global headquarters is now open at the iconic Breuer building at 945 Madison Avenue in New York City.
THE ROLE
As an Information Security Manager, you will be responsible for executing major components of Sotheby's information security strategy, as well as helping to define it. Reporting directly to the CISO, you will be the driving force behind accomplishing key initiatives, while working closely with managers across the globe to balance achieving business objectives with managing risk.
Rather than being confined to a narrow role, you will be a utility player, moving between different areas as needed, for example: performing risk assessments and security reviews, procuring infosec tools, managing projects, drafting policies and processes, conducting risk management meetings, designing controls, overseeing auditors, and leading incident response. And as a key part of a team dedicated to continuous improvement, you will help us get better every day.
You obsess over getting the key facts nailed down. You have an attention to detail that some might call "extreme". And you recognize the daunting challenge of managing information security at a historic and globally recognized brand, but that challenge excites you.
RESPONSIBILITIES
- Work with IT and business unit managers to drive security initiatives to completion
- Lead business continuity and disaster recovery planning and preparation projects
- Lead internal and external security audits, acting as the primary point of contact for auditors
- Draft, update, and enforce information security policies, processes, and standards
- Conduct third-party vendor risk assessments and internal security risk assessments
- Maintain risk registers, compliance dashboards, and reports for senior leadership
- Audit internal systems to verify compliance with mandatory security controls
- Develop policies, processes, and risk assessments aligned to top frameworks such as CIS, NIST, ISO 27001, and SOC 2
- Crosswalk and harmonize controls across multiple compliance frameworks
- Document security requirements, support control implementation, and help track remediation progress
- Build risk registers, support assessments, and monitor remediation progress
- Plan, lead, and execute control validation and testing activities across various domains (e.g., access management, vulnerability management, incident response, data protection)
- Mentor junior analysts and engineers, providing guidance on control validation methodologies and best practices while fostering a culture of accountability
- Document control issues and collaborate with stakeholders to develop remediation recommendations
- Develop and enhance control testing methodologies, procedures, and reporting mechanisms
REQUIRED QUALIFICATIONS
- At least five years of hands-on experience in information security roles
- Bachelor's or Master's in computer science, engineering, or cybersecurity
- Deep understanding of information security fundamentals
- Proven ability to manage complex projects from conception to completion
- Ability to explain complex technical risks in simple, business-friendly language
- Ability to communicate clearly, precisely, and concisely
PREFERRED QUALIFICATIONS
- At least one active credential, such as CISA, CRISC, CISM, or CISSP
- Experience performing risk assessments across diverse systems including SaaS and mobile
- Deep knowledge of frameworks and standards such as CIS, ISO 27001, and NIST
- Experience leading incident response through a cyberattack or data breach
To view our Candidate Privacy Notice for the US, please click here.
To view our Candidate Privacy Notice for the UK, Hong Kong, France and Switzerland, please click here.
The Company is an equal opportunity employer and considers all applicants for employment without regard to race (including, without limitation, traits historically associated with race, such as natural hair, hair texture, and protective and treated or untreated hairstyles), color, creed, religion, sex, sexual orientation, marital or civil partnership/union status, national origin, age, disability, pregnancy, genetic predisposition, genetic information, reproductive health decision, sexual orientation, gender identity or expression, alienage or citizenship status, domestic violence victim status, military or veteran status, or any other characteristic protected by federal, state/province or local law. The Company complies with applicable state and local laws prohibiting discrimination in employment in every jurisdiction in which it operates.
See All 7 Information Security Intern Jobs in Oregon
Find roles in Oregon that match your experience and apply in just a few clicks.
Find JobsInformation Security Intern Jobs by City in Oregon
Where Oregon roles are concentrated, by current openings.
Information Security Intern Job Market in Oregon
A snapshot from current Oregon openings, updated as new roles post.
Who's Hiring
What Oregon Employers Look For
The qualifications that appear most often in information security intern jobs across Oregon.
- Enrolled in or recently completed a cybersecurity, computer science, or information systems degree program
- Foundational knowledge of network protocols, firewalls, and intrusion detection systems
- Familiarity with security frameworks such as NIST, ISO 27001, or CIS Controls
- Hands-on experience or coursework in vulnerability scanning tools such as Nessus or Qualys
- Ability to obtain and maintain a background check clearance required by Oregon employers
- CompTIA Security+ certification completed or actively in progress preferred by most Oregon employers
Information Security Intern Jobs in Oregon: Frequently Asked Questions
How do you become a information security intern in Oregon?
The most direct path is enrolling in a cybersecurity or computer science program at an Oregon institution such as Oregon State University, Portland State University, or the University of Oregon, which have established pipelines into local tech and healthcare employers. Oregon does not require a state-issued license to work as an information security intern, but earning CompTIA Security+ before or during your internship search gives your application a concrete, recognized credential that Oregon employers consistently ask for.
Which companies hire information security interns in Oregon?
Oregon information security intern roles are posted by Concora Credit, Neumo Holdings, and Sotheby's and others right now, based on current listings on Migrate Mate as of September 2026. Oregon's blend of large semiconductor firms, health systems, and financial services companies means openings appear across industries rather than clustering in a single sector.
Which Oregon cities have the most information security intern jobs?
Salem, Beaverton, and Portland account for the largest share of information security intern openings in Oregon. Portland drives the majority of postings as the state's primary corporate and tech hub, while Beaverton and Hillsboro benefit from the dense concentration of Intel campuses and supporting technology suppliers, and Eugene draws openings tied to the University of Oregon and its affiliated research and healthcare operations.
Are there remote information security intern jobs in Oregon?
Yes, and more than most fields, though hands-on lab rotations and on-site system access requirements mean fully remote arrangements are less common at the intern level than for senior roles. About 100% of information security intern openings tied to Oregon are remote or hybrid as of September 2026, reflecting a mix of policies across employers. Threat analysis, security operations center monitoring, and compliance documentation tasks are the parts of the role most frequently offered in a remote or hybrid format.
How can I get hired as a information security intern in Oregon with little or no experience?
The most realistic entry path is applying through the formal internship programs that Oregon State University and Portland State University run in partnership with local employers, which are designed specifically for students without prior professional experience. Large Oregon health systems including Providence and OHSU accept intern candidates from adjacent IT support or help desk roles, and Intel's campus recruiting actively considers applicants whose experience comes entirely from coursework, capture-the-flag competitions, or personal lab environments. Building a home lab, earning CompTIA Security+, and documenting both on a resume gives Oregon hiring managers something concrete to evaluate when work history is thin.
Where can I find and apply to information security intern jobs in Oregon?
You can find and apply to information security intern jobs in Oregon on Migrate Mate, which lists current Oregon openings in one place. Search the listings to find roles that match your background and apply directly to the ones that fit.
See All 7 Information Security Intern Jobs in Oregon
Find roles in Oregon that match your experience and apply in just a few clicks.
Find Jobs