About the role#
Join the TMX Group team as a Junior GRC Analyst Intern. You will support our enterprise cybersecurity governance structure while gaining hands-on experience in risk assessments, policy maintenance, compliance monitoring, and audit readiness. You will report to the Senior Manager, Information Security II and collaborate with technology teams, business stakeholders, and security specialists.
What you'll do#
- Assist in maintaining cybersecurity policies, technology frameworks, standards, and guidelines, including version tracking and documentation updates.
- Support risk assessments, such as Threat Risk Assessments (TRAs) and Business-As-Usual (BAU) risk intakes.
- Maintain and update centralized Information Security Risk Register logs.
- Monitor alignment with internal policies and industry security frameworks like NIST CSF, ISO 27001, and CIS Controls.
- Track exception intakes, log compliance issues, and follow up on remediation milestones.
- Assist with internal and external audit deliverables and regulatory inquiries.
- Collect, validate, and organize GRC metrics to draft monthly and quarterly leadership dashboards.
- Support vendor risk oversight by logging security reviews and tracking remediation actions.
- Partner with Global Technology Services (GTS), business partners, and security architecture teams.
What you'll need#
- Current enrollment in an accredited undergraduate or graduate program in Computer Science, Cybersecurity, Information Technology, Engineering, Business Technology Management, or a related discipline.
- Foundational understanding of core information security principles, technology risk concepts, and industry frameworks such as NIST CSF, ISO 27001, or CIS Controls.
- Intermediate to advanced proficiency in Microsoft Excel or Google Sheets.
- Strong analytical thinking, attention to detail, and organizational skills.
- Excellent verbal and written communication skills.
- Familiarity with GRC platforms or ticketing tools like ServiceNow is preferred.
- Working knowledge of cloud productivity environments like Google Workspace is preferred.
- Academic coursework or progress toward certifications such as CompTIA Security+, CISA, or CRISC is preferred.
Location & details#
- Location: Toronto, Ontario (Hybrid, 2-3 days in office).
- Term: Winter 2027 (January 11, 2027 to April 30, 2027).
- Employment: Full-time internship.
- Compensation: $20 to $23 per hour CAD.
- Note: Candidates must be authorized to work in Canada. Sponsorship is not available.
About TMX Group
TMX Group operates capital and commodity markets for businesses and investors. The company manages several exchanges including the Toronto Stock Exchange and the Montréal Exchange. It provides clearing, data, and trading solutions to a global client base. Founded in 2008, the organization maintains a workforce of over 2,500 employees. Its headquarters are in Toronto, with additional offices located in cities across North America, Europe, and Asia.
How to get in at TMX Group
Applying early to TMX Group is a significant advantage because recruiters review applications as they arrive. Intern Insider sends an instant alert the moment a role matching your target is published, so you can submit your materials before the applicant pile grows. This helps you stay ahead of the typical hiring cycle. You can also reach out to the recruiters behind the company's roles to ask about the position or a referral. Intern Insider surfaces these specific contacts, which materially improves your response rates compared to submitting into a general queue.
