Find Jobs

Grounded by a compelling mission, core values, and compassion for people, CDPHP and its family of companies offer a strong foundation for a rewarding career. Established in 1984, CDPHP is a physician-founded, member-focused, and community-based not-for-profit health plan that offers high-quality affordable health insurance to members throughout New York. The company values people, quality, innovation, and community, and its corporate culture supports those values wholeheartedly. CDPHP is committed to fostering a culture of belonging and takes a wholistic approach to diversity, equity, and inclusion. At CDPHP, the employees have a voice and are encouraged to make an impact at both the company and community levels through engagement and volunteer opportunities. CDPHP invests in employees who share these values and invites you to be a part of that experience.

The Information Risk and Governance Intern will be a member of the Information Risk and Governance team, responsible for supporting information security policy, security awareness, internal control evaluations, risk assessments, business continuity planning, incident management, and breach event response. The responsibilities may include all or some of the following:

• Participate in the development of security policies, standards and documentation.
• Participate in the support of external audits, reviews and compliance programs.
• Coordinate evidence production on request, availability of resources and plans meetings.
• Monitor processes, as well as control activities.
• Support risk program maintenance, metrics, risk assessments and business continuity program.
• Contribute to the compliance of HIPAA, PCI, MAR IT and regulations.

QUALIFICATIONS:

• Must be in good academic standing and pursuing undergraduate or graduate level degree in the following area(s) of concentration: Computer Science, Cyber Security, Information Systems, Information Security, Risk Management, Crisis Management, Emergency Preparedness, Informatics, or related degree.
• High School Diploma or GED required.
• Coursework in some or all of the following areas: cyber security, information technology, communication and writing, emergency response or related areas required.
• Experience with Microsoft Office, including Word, Excel, and Outlook is required.
• Working knowledge of generally accepted security practices, including Information security principles, procedures, and controls.
• Working knowledge of information technology and the risks associated with these technologies.
• General understanding of risk assessment and risk mitigation practices.
• Ability to work on multiple tasks while maintaining work quality and productivity.
• Ability to work both collaboratively within a team environment and on independent projects.
• Demonstrated ability to work with and maintain confidential information.
• Excellent verbal and written communication skills.
• Flexibility to adapt to a changing and fast-paced environment.

CDPHP salary ranges are designed to be competitive with room for professional and financial growth. Individual compensation is based on several factors unique to each candidate, such as work experience, qualifications, and skills. In addition to cash compensation, CDPHP employees may be eligible for an incentive payment, a discretionary cash reward based on employee and company performance. Some roles may also be eligible for overtime pay.

CDPHP compensation packages go far beyond just salary. The company offers a comprehensive total rewards package that includes award-winning health care coverage, health care dollars, a generous paid time off allowance, employee assistance programs, flexible work environment, and much more. Learn about all CDPHP employee benefits at

As an Equal Opportunity / Affirmative Action Employer, CDPHP will not discriminate in its employment practices on the basis of race, color, creed, religion, sex (including pregnancy, childbirth, or related medical conditions), sexual orientation, gender identity or expression, transgender status, age, national origin, marital status, citizenship, disability, criminal record, genetic information, predisposition or carrier status, status with respect to receiving public assistance, domestic violence victim status, protected veterans status, or any other characteristics protected under applicable law. To that end, all qualified applicants will receive consideration for employment without regard to any such protected status.

CDPHP and its family of companies include subsidiaries Strategic Solutions Management Consultants (SSMC), Practice Support Services (PSS), and ConnectRx Services, LLC.