IT Governance, Risk and Compliance; GRC Student

Nature of the Work

The Information Technology organization is currently looking for a Student to join the Governance, Risk, and Compliance (GRC) team. The candidate will work 35 hours during off‑school periods and part time during school periods for up to 22 hours.

As an integral function within the Finance and Services portfolio, the IT organization is a key stakeholder and contributor. IT provides computing, network, and media services in support of learning, teaching, research, and administration at the University of Calgary. Critical to the technology strategy is an understanding that technology has a dual responsibility within the University: meeting the expectation that technology is available and reliable and must enable an environment of learning and discovery by supporting the teaching and research communities.

GRC focuses on developing, enhancing, and maintaining end‑to‑end processes in compliance with control frameworks for managing the University’s information and related technologies. The incumbent ensures that core processes, controls and compliance requirements align to the needs of the University, providing leadership and technical guidance to both IT and Business Units on the identification and mitigation of technology risk.

As a member of the GRC team, you will report to the Manager of the GRC department to support the coordination and facilitation of the University’s security governance goals and initiatives, assisting with day‑to‑day activities, and will have the opportunity to lead small risk assessments during the internship period.

The successful candidate will help execute cyber security risk assessments of the University of Calgary suppliers. You will provide specialized expertise and guidance on assessing risks, identifying potential gaps, and will also be required to maintain the risk acceptance tracking process and maintain residual risks in the cyber security risk register while tracking remediation activities with key business and technical stakeholders.

• Assist in tracking and monitoring status of information security risks (policy exceptions and non-conformities)
• Perform risk assessments reviews related to vendor risk management. Assist with annual reviews of mission critical vendors
• Assist with data analysis, documentation, and ad‑hoc projects related to governance, compliance, and risk management topics
• Provide support for audit preparedness
• Track status on Information Security Policy and Process annual reviews
• Handle sensitive and/or confidential material and information with suitable discretion

• Actively pursuing a bachelor's degree in Computer Science, Cyber Security, Information Systems, Information Security and Privacy, Technology Management, Software security or related field at the University of Calgary.
• A general understanding of networks, operating systems, cloud operations and associated technologies and services
• Knowledge and/or understanding of common industry frameworks, including NIST Cyber Security Framework (CSF), NIST 800-53, ISO 27001 and 27002, Payment Card Industry (PCI) Data Security Standard (DSS), or OWASP is considered an asset
• Must have advanced ability in the use of Microsoft Office which includes Access, Excel, Word, and Power Point
• Strong organizational, process development and documentation skills
• Ability to communicate clearly and concisely to diverse audiences, in both oral and written form
• It is imperative that the incumbent for this role has a strong sense of ownership, is a strong team player, and can balance technical capabilities with business needs
• Strong organizational, interpersonal, and written communication skills and the ability to communicate effectively with diverse business units, technology staff, vendors and auditors is essential

March 13, 2026.

As an equitable and inclusive employer, the University of Calgary recognizes that a diverse staff/faculty benefits and enriches the work, learning and research experiences of the entire campus and greater community. We are committed…