Junior GRC Analyst Intern

TSX Inc.; Toronto; Hybrid; CAD 28,000 - 32,000; Full time

Job summary

TMX Group is seeking a Junior GRC Analyst Intern to support cybersecurity governance, risk assessments, policy maintenance, and audit readiness within a mission-critical financial markets environment. The role offers hands-on exposure across GRC disciplines while collaborating with technology teams and stakeholders.

Based in Toronto with a hybrid schedule (2-3 days in office), you will gain real-world experience in BAU risk management, vendor risk oversight, and regulatory inquiries.

Qualifications

• Currently enrolled in an accredited post-secondary undergraduate or graduate program in Computer Science, Cybersecurity, Information Technology, Engineering, Business Technology Management (BTM), or a related discipline.
• Foundational understanding of core information security principles and risk concepts.
• Intermediate to advanced spreadsheet proficiency (Excel/Sheets).
• Strong analytical thinking and attention to detail with proactive questioning of discrepancies.
• Excellent interpersonal and communication skills for cross-functional collaboration.
• Strong self-management and organizational skills with accountability.

Responsibilities

• Policy & Governance Support: maintain cybersecurity policies, frameworks, standards, and guidelines under guidance.
• Risk Assessments & Register Management: support risk assessments and update Information Security Risk Register logs.
• Compliance & Remediation Tracking: monitor policy alignment, track exceptions, and follow up on remediation milestones.
• Audit & Regulatory Assurance: assist with internal/external audits and regulatory inquiries by organizing documents.
• Metrics & Reporting: collect and organize GRC KPIs/KRIs for monthly/quarterly leadership dashboards.
• Third-Party Risk Management: log security reviews and escalate vendor concerns as needed.
• Stakeholder Collaboration: partner with GTS, business partners, and security architecture teams.

Skills

Strong analytical thinking

Excel proficiency

Excellent communication

Attention to detail

Self-management

Education

Undergrad/grad student in CS/IT/Engineering/BTM

Tools

ServiceNow

Google Workspace

Job description

Venture outside the ordinary - TMX Careers The TMX group of companies includes leading global exchanges such as the Toronto Stock Exchange, Montreal Exchange, and numerous innovative organizations enhancing capital markets. United as a global team, we’re connecting cross‑functionally, traversing industries and geographies, moving opportunity into action, advancing global economic growth, and propelling progress.

Through a rich exchange of ideas, meaningful collaboration, and a nimble operating model, we’re powering some of the nation's most critical systems, fueling capital formation and innovation, bringing increased opportunity to business visionaries, product ingenuity to consumers, and career exploration to our team. Ready to be part of the action?

Junior GRC Analyst Intern

Join the TMX Group team as a Junior GRC Analyst Intern and play an active role in maturing, maintaining, and supporting our enterprise cybersecurity governance structure. Reporting to the Senior Manager, Information Security II, you will gain hands‑on experience supporting cybersecurity risk assessments, policy maintenance, compliance monitoring, audit readiness, and third‑party risk management.

This role offers an exceptional opportunity to build real‑world experience across governance, risk, and compliance within a mission‑critical financial markets environment, collaborating closely with technology teams, business stakeholders, and security specialists across the organization.

Reports to: Senior Manager, Information Security

Job Location: Hybrid (2-3 days in office) - based in Toronto, ON.

Key Accountabilities

• Policy & Governance Support: Assist in maintaining cybersecurity policies, technology frameworks, standards, and guidelines; support version tracking, documentation updates, and compliance evidence collection under the guidance of senior team members.
• Risk Assessments & Register Management: Provide operational support for risk assessments, including Threat Risk Assessments (TRAs) and Business-As-Usual (BAU) risk intakes; maintain and update centralized Information Security Risk Register logs with strong attention to detail.
• Compliance & Remediation Tracking: Monitor alignment with internal policies and leading industry security frameworks (e.g., NIST CSF, ISO 27001, CIS Controls); track exception intakes, log compliance issues, and follow up on remediation milestones with risk owners.
• Audit & Regulatory Assurance: Assist with internal and external audit deliverables and regulatory inquiries by organizing documentation packages, updating response trackers, and validating submitted materials.
• Metrics & Reporting: Collect, validate, and organize Governance, Risk, and Compliance (GRC) metrics (KPIs/KRIs) to assist in drafting monthly and quarterly reporting dashboards for leadership.
• Third-Party Risk Management (TPRM): Support vendor risk oversight by logging security reviews, tracking vendor remediation actions, and escalating identified concerns as required.
• Stakeholder Collaboration: Partner with Global Technology Services (GTS), business partners, and security architecture teams to support GRC engagement workflows and cybersecurity awareness initiatives.

Must Have(s)

• Currently enrolled in an accredited post-secondary undergraduate or graduate program in Computer Science, Cybersecurity, Information Technology, Engineering, Business Technology Management (BTM), or a related discipline.
• Foundational understanding of core information security principles, technology risk concepts, and industry frameworks (such as NIST CSF, ISO 27001, or CIS Controls).
• Intermediate to advanced spreadsheet proficiency (e.g., Microsoft Excel or Google Sheets) with the ability to analyze numbers, organize datasets, and maintain data integrity.
• Strong analytical thinking and attention to detail, with a proactive approach to questioning discrepancies, verifying data accuracy, and solving problems.
• Excellent interpersonal and communication skills (verbal and written), with the confidence to collaborate across cross‑functional technical and business teams.
• Strong self‑management and organizational skills, demonstrated accountability, and a commitment to delivering on assigned objectives.

Nice to Have(s)

• Familiarity with GRC platforms or ticketing and workflow management tools (e.g., ServiceNow).
• Working knowledge of cloud productivity environments (e.g., Google Workspace).
• Academic coursework, active interest, or progress toward foundational industry certifications (e.g., CompTIA Security+, CISA, or CRISC).

Notes

4 month Co‑op Internship: January 11, 2027 to April 30, 2027

Salary Range: $20/hour - $23/hour CAD

Please note that the salary range included is a guideline only. The salary offered may vary based on factors, including, but not limited to, the successful candidate’s relevant knowledge, skills, and experience.

In the market for… Excitement - Explore emerging technology and innovation, as well as ventures and digital finance that shape the future of global markets! Experience the movement of the market while grounded in the stability of close to 200 years of success.

Connection - With site hubs in some of the world’s most multicultural cities, we leverage our size and structure to create rich connections and belonging while experiencing powerful global impact through our work.

Impact - More than a platform, we use our talents to power mission‑critical systems that drive global economic advancement, innovation, and growth. As well, our employee‑led Team Impact spreads social good via our giving strategy.

Wellness - From empathetic leadership to a culture of flexibility and balance, we believe wellness at work creates the maximum yield and a stronger “we”. Plus, with a cloud‑first and hybrid workstyle, as well as generous time‑off and leaves, we support a life well lived!

Growth - From a growth mindset in our work, to expansion in our business, TMX is home to action‑takers energized by the achievement of ambitious growth.

Ready to enrich your career with impactful work, leaders who truly care, and the flexibility and programs to help you thrive as part of #TeamTMX.

Please note that our company is not currently sponsoring work permit applications and the applicant must be authorized to work in the country where this position is located.

TMX is committed to creating and sustaining a collegial work environment in which all individuals are treated with dignity and respect and one which reflects the diversity of the community in which we operate. We provide accommodations for applicants and employees who require it.

Our Culture

The TMX group of companies includes leading global exchanges such as the Toronto Stock Exchange, Montreal Exchange, and numerous innovative organizations enhancing capital markets. United as a global team, we’re connecting cross‑functionally, traversing industries and geographies, moving opportunity into action, advancing global economic growth, and propelling progress.

Through a rich exchange of ideas, meaningful collaboration, and a nimble operating model, we're powering some of the nation's most critical systems, fueling capital formation and innovation, bringing increased opportunity to business visionaries, product ingenuity to consumers, and career exploration to our team. Ready to be part of the action?

Our Business

TMX Group operates global markets, and builds digital communities and analytic solutions that facilitate the funding, growth and success of businesses, traders and investors. TMX Group's key operations include Toronto Stock Exchange, TSX Venture Exchange, TSX Alpha Exchange, The Canadian Depository for Securities, Montréal Exchange, Canadian Derivatives Clearing Corporation Trayport and VettaFi, which provide listing markets, trading markets, clearing facilities, depository services, technology solutions, data products and other services to the global financial community.

TMX Group is headquartered in Toronto and operates offices across North America (Montréal, Calgary, Vancouver and New York), as well as in key international markets including London, Singapore and Vienna.

For more information about TMX Group, visit www.tmx.com.

Follow TMX Group on Twitter: @TMXGroup.