Intern, Cybersecurity (Data Privacy & Security Awareness)

The 2027 Ulta Beauty Internship is a structured 10-week program designed to develop future talent and provide interns with unique and impactful development experience. This program is tailored for rising college Juniors and Seniors, offering Corporate, Field, and Distribution Center internship tracks. The internship will be hybrid for Corporate interns and in-person for Distribution Center and Field interns. Interns will gain hands-on experience in Ulta Beauty’s operations while contributing to business needs, engaging in meaningful projects, and broadening their professional development. The internship program provides real-world experience directly related to academic discipline and career goals, offering a better understanding of career options. 

• Hands-on experience working as a member of a specific department, team, and or location.
• Assigned projects to accelerate learning of key functions and processes.
• Cross-functional exposure to various departments.
• Comprehensive overview of the company structure and strategy.
• Tailored professional development sessions and valuable networking opportunities.
• Capstone presentation to leadership, showing project outcomes and recommendations.

TEAM OVERVIEW:

Join an exceptional team within Ulta Beauty’s Cybersecurity & Digital Trust that leads Ulta Beauty's Data Privacy and Security Awareness initiatives, with a commitment to protecting our guests, associates, and communities. As the retail landscape continues to evolve, so do the requirements for safeguarding guest data and maintaining trust.

The Data Privacy & Security Awareness Internship provides hands-on experience in understanding how organizations collect, manage, protect, and govern personal information while adhering to evolving privacy regulations and industry best practices. The intern will also assist in developing and delivering security awareness communications, training materials, and educational content to help promote a strong culture of security and privacy across the organization. This role offers the opportunity to collaborate with cross-functional teams, including Legal, Compliance, Cybersecurity, Engineering, Product Management, and Business Operations, to help ensure the responsible collection, use, storage, and protection of personal data.

Through this internship, candidates will gain valuable exposure to privacy regulations, privacy-by-design principles, privacy impact and risk assessments, data governance frameworks, creating security awareness materials and emerging privacy & security challenges within a dynamic and fast-paced retail technology environment. This experience provides a strong foundation for a career in data privacy, cybersecurity, risk management, or compliance.

INTERNSHIP RESPONSIBILITIES:

As an intern, you will contribute to achieving the following goals:

• Assist in monitoring compliance with U.S. privacy laws and regulations, including support for privacy program activities related to CCPA, CPRA, and other applicable requirements.
• Help maintain privacy documentation, records of processing activities, and evidence supporting compliance initiatives.
• Participate in Privacy Impact Assessments (PIAs) and Data Protection Impact Assessments (DPIAs) for new products, services, technologies, and business initiatives.
• Assist with documenting data flows and maintaining enterprise data inventories to support privacy and governance activities.
• Analyze how personal data is collected, used, shared, stored, and retained across business processes and technology systems.
• Support the development of timely, accessible privacy and cybersecurity awareness communications, training materials, and educational content for associates across the organization with relevant context and compelling calls to action.
• Assist team in preparing educating, engaging events and activities with creativity that strengthen the cybersecurity posture of all Associates across Ulta Beauty.
• Support various simulated social engineering exercise development, results analysis and presentation, and post-campaign education actions.
• Assist in preparing executive summaries, metrics, reports, and presentations for leadership to communicate privacy and cybersecurity awareness program progress, updates, and risk insights.
• Contribute to communications related to privacy initiatives, regulatory developments, and policy updates.
• Collaborate with cross-functional teams, including Legal, Compliance, Cybersecurity, Engineering, Product Management, and Business Operations, to support privacy-by-design and data protection efforts. Support data governance and privacy risk management activities by identifying and documenting privacy risks and recommending remediation actions where appropriate.

PREFERRED QUALIFICATIONS:

• Pursuing a degree in Information Technology, Information Systems, Computer Science, Cybersecurity, or a related field.
• Proficiency in Microsoft Office Suite, particularly Excel and PowerPoint
• Familiarity with Power BI and data visualization tools
• Understanding data governance and privacy management tools such as Microsoft Purview, OneTrust.
• Basic SQL skills for data analysis and reporting
• Familiarity with collaboration platforms including Microsoft Teams, SharePoint, Jira, and Confluence.
• Excellent interpersonal, verbal, presentation, and written communication skills
• Desire to work in a fast-paced environment and interact with various levels of leadership

REQUIREMENTS:

• Preferable: Bolingbrook, IL
• Must be a rising Junior or Senior enrolled in an accredited undergraduate university in the summer of 2027.
• Previous work experience and active involvement with on-campus organizations or activities.
• Strong organizational and time management skills, attention to detail, and sense of urgency.