Information Services Co-op, GRC & Contracts

Aecon Concessions; Toronto; On-site; CAD 30,000 - CAD 60,000; Full time

Job summary

A leading infrastructure development company is seeking an Information Services Co-op, GRC & Contracts, based in Toronto. The role involves supporting security governance, risk assessment, and IT contract management processes. Ideal candidates are currently enrolled in a Computer Science or Information Security program and possess strong analytical and organizational skills. This 4-month co-op opportunity pays between $22.00 and $25.00 per hour and promotes a diverse, inclusive workplace.

Benefits

Diversity and Inclusion training

Career development programs

Support for mental and physical well-being

Qualifications

• Familiarity with risk assessment methodologies and tools.
• Ability to manage multiple tasks and prioritize effectively.
• Experience in a fast-paced environment.

Responsibilities

• Assist in developing and implementing the Information Security GRC program.
• Conduct risk and vulnerability assessments.
• Support creation of security policies and process documentation.
• Collaborate with teams to embed security requirements into processes.
• Assist in drafting and organizing contract documentation.

Skills

Analytical skills

Organization

Communication

Risk assessment knowledge

Attention to detail

Education

Currently enrolled in a Computer Science or Information Security program

Tools

Excel

SharePoint

Document management tools

Job description

It has come to our attention that various international organizations or individuals have been offering false employment opportunities at Aecon Group Inc. Aecon Group Inc. employment policies and processes involve interviews, and candidates who seek employment are never required to pay us any sum of money. To do so would be contrary to our business conduct guidelines and ethical practices. We also do not extend formal offers of employment or execute employment agreements through social media or social chat platforms.

We take this matter extremely seriously and are working with the appropriate authorities to shut down such fraudulent schemes. Please remain vigilant on this matter and report any suspicious outreach to your local authorities and email any concerns [e-mail]

Date: Feb 3, 2026

Toronto, ON, CA

Operating Sector: Information Services

Position Title: Information Services Co-op, GRC & Contracts

Come Build Your Career at Aecon!

As a Canadian leader in infrastructure development, Aecon is safely and sustainably building what matters for future generations to thrive! We lead some of the most impactful infrastructure projects of our generation, at the forefront of transformational change in transportation and energy, and partnering every day to build, connect, power, and strengthen our communities.

At Aecon, you can count on:

• Safety Always. Our number one core value. If we can’t do it safely, we don’t do it at all.
• Integrity. We lead by example, with humility and courage.
• Accountability. We’re passionate about delivering on our commitments.

We lead the infrastructure industry with purpose, and our people are at the heart of everything we do. So, we invest in our people, just like they invest in us!

At Aecon we:

• Ensure you and your family receive the services needed to support your mental, emotional, and physical well-being.
• Believe in helping you build your career through our Aecon University and Leadership Programs.
• Are committed to supporting and investing in inclusive work environments, through initiatives like Equity, Diversity & Inclusion training, our Aecon Women in Trades and Aecon Diversity in Trades programs, and our Employee Resource Groups (ERGs) to ensure we are building inclusion into every aspect of our culture at Aecon.
• Are a leader in sustainable construction. With a strong commitment to operating responsibly by minimizing our impact on the environment and surrounding communities.

Our business success relies on strong execution and continuous improvement – driven by the diversity, expertise and teamwork of our people. We’re always searching the globe for innovative, collaborative minds to join our best-in‑class Aecon community!

What is the Opportunity?

The Information Services Co‑op, GRC & Contracts role provides a unique blend of experience across cybersecurity governance, risk, and compliance while gaining hands‑on exposure to IT contract management and vendor engagement. In this role, you will help ensure our security policies and controls align with regulatory and industry standards while supporting procurement activities tied to technology solutions and services. Please note this is a 4‑month co‑op opportunity.

What You’ll Do Here:

Security Governance, Risk & Compliance:

• Assist in the development, maintenance, and implementation of the Information Security GRC program.
• Conduct risk assessments, vulnerability assessments, and gap analyses to identify security risks and compliance gaps.
• Support the creation, review, and updating of security policies, standards, SOPs, and process documentation.
• Maintain and update the organization’s security controls library.
• Perform compliance checks to ensure security controls are implemented and functioning as intended.
• Assist in collecting evidence for audits, assessments, and certification activities (e.g., SOC 2, ISO, internal audits).
• Collaborate with stakeholders across Information Services and business units to embed security and compliance requirements into processes and projects.
• Support the review and processing of IT‑related procurement requests, including software renewals, new tools, hardware, SaaS platforms, and professional services.
• Assist in drafting, reviewing, and organizing contract documentation such as Statements of Work (SOWs), Master Service Agreements (MSAs), and Data Processing Agreements (DPAs).
• Work with the Procurement team and IS leadership to ensure contracts align with security, legal, and compliance requirements.
• Coordinate with vendors to gather necessary documentation, clarify contract requirements, and track deliverables.
• Support RFX processes (RFQs, RFIs, RFPs) by helping prepare documents, consolidate vendor responses, and evaluate submissions.
• Help maintain vendor records, contract repositories, renewal calendars, and risk assessments in collaboration with IT and Procurement.
• Assist in monitoring vendor performance and compliance with contractual obligations, including cybersecurity expectations.

What You Bring to the Team:

• Currently enrolled in a Computer Science, Information Security or equivalent program.
• Familiarity with risk assessment methodologies and tools.
• Strong analytical and organizational skills with high attention to detail.
• Excellent communication skills with the ability to collaborate across teams.
• Ability to manage multiple tasks, prioritize effectively, and work in a fast‑paced environment.
• Experience with Excel, SharePoint, or document management tools is an asset.

Reason for vacancy: New position

The expected hourly pay for this opportunity is $22.00-$25.00

Aecon fosters diversity, inclusion and belonging within and across our organization. We welcome all to apply including women, visible minorities, Indigenous peoples, persons with disabilities, and persons of any sexual orientation or gender identity.

We are committed to adhering to the objectives and requirements outlined in the Accessible Canada Act (ACA), and to meeting the accessibility needs of persons with disabilities in a timely manner. Through the implementation of the requirements of the ACA and its applicable regulations, appropriate accommodations will be provided upon request throughout the interview and hiring process.

As part of our commitment to fair and transparent hiring practices, Aecon may use artificial intelligence (AI) tools to assist in screening and reviewing candidates. These tools are applied responsibly and in accordance with applicable privacy laws and Aecon’s AI Usage Policy. All final decisions are made by qualified Aecon team members.