Position Title:  Information Services Co-op, GRC & Contracts

Come Build Your Career at Aecon!

As a Canadian leader in infrastructure development, Aecon is safely and sustainably building what matters for future generations to thrive! We lead some of the most impactful infrastructure projects of our generation, at the forefront of transformational change in transportation and energy, and partnering every day to build, connect, power, and strengthen our communities.

At Aecon, you can count on:

• Safety Always. Our number one core value. If we can’t do it safely, we don’t do it at all.
• Integrity. We lead by example, with humility and courage.
• Accountability. We’re passionate about delivering on our commitments.
• Inclusion. We provide equitable opportunities for everyone.

We lead the infrastructure industry with purpose, and our people are at the heart of everything we do. So, we invest in our people, just like they invest in us! 

At Aecon we:

• Ensure you and your family receive the services needed to support your mental, emotional, and physical well-being.
• Believe in helping you build your career through our Aecon University and Leadership Programs.
• Are committed to supporting and investing in inclusive work environments, through initiatives like Equity, Diversity & Inclusion training, our Aecon Women in Trades and Aecon Diversity in Trades programs, and our Employee Resource Groups (ERGs) to ensure we are building inclusion into every aspect of our culture at Aecon.
• Are a leader in sustainable construction. With a strong commitment to operating responsibly by minimizing our impact on the environment and surrounding communities.

Our business success relies on strong execution and continuous improvement – driven by the diversity, expertise and teamwork of our people. We’re always searching the globe for innovative, collaborative minds to join our best-in-class Aecon community!

What is the Opportunity?

The Information Services Co-op, GRC & Contracts role provides a unique blend of experience across cybersecurity governance, risk, and compliance while gaining hands-on exposure to IT contract management and vendor engagement. In this role, you will help ensure our security policies and controls align with regulatory and industry standards while supporting procurement activities tied to technology solutions and services. Please note this is a 4-month co-op opportunity.

What You’ll Do Here: 

Security Governance, Risk & Compliance:

• Assist in the development, maintenance, and implementation of the Information Security GRC program.
• Conduct risk assessments, vulnerability assessments, and gap analyses to identify security risks and compliance gaps.
• Support the creation, review, and updating of security policies, standards, SOPs, and process documentation.
• Maintain and update the organization’s security controls library.
• Perform compliance checks to ensure security controls are implemented and functioning as intended.
• Assist in collecting evidence for audits, assessments, and certification activities (e.g., SOC 2, ISO, internal audits).
• Collaborate with stakeholders across Information Services and business units to embed security and compliance requirements into processes and projects.

IS Contracts & Vendor Management:

• Support the review and processing of IT-related procurement requests, including software renewals, new tools, hardware, SaaS platforms, and professional services.
• Assist in drafting, reviewing, and organizing contract documentation such as Statements of Work (SOWs), Master Service Agreements (MSAs), and Data Processing Agreements (DPAs).
• Work with the Procurement team and IS leadership to ensure contracts align with security, legal, and compliance requirements.
• Coordinate with vendors to gather necessary documentation, clarify contract requirements, and track deliverables.
• Support RFX processes (RFQs, RFIs, RFPs) by helping prepare documents, consolidate vendor responses, and evaluate submissions.
• Help maintain vendor records, contract repositories, renewal calendars, and risk assessments in collaboration with IT and Procurement.
• Assist in monitoring vendor performance and compliance with contractual obligations, including cybersecurity expectations.

What You Bring to the Team: 

• Currently enrolled in a Computer Science, Information Security or equivalent program
• Familiarity with risk assessment methodologies and tools
• Strong analytical and organizational skills with high attention to detail.
• Excellent communication skills with the ability to collaborate across teams.
• Ability to manage multiple tasks, prioritize effectively, and work in a fast-paced environment.
• Experience with Excel, SharePoint, or document management tools is an asset.

Reason for vacancy: New position

The expected hourly pay for this opportunity is $22.00-$25.00

Aecon fosters diversity, inclusion and belonging within and across our organization. We welcome all to apply including, women, visible minorities, Indigenous peoples, persons with disabilities, and persons of any sexual orientation or gender identity.

We are committed to adhering to the objectives and requirements outlined in the Accessible Canada Act (ACA), and to meeting the accessibility needs of persons with disabilities in a timely manner. Through the implementation of the requirements of the ACA and its applicable regulations, appropriate accommodations will be provided upon request throughout the interview and hiring process.

As part of our commitment to fair and transparent hiring practices, Aecon may use artificial intelligence (AI) tools to assist in screening and reviewing candidates. These tools are applied responsibly and in accordance with applicable privacy laws and Aecon’s AI Usage Policy. All final decisions are made by qualified Aecon team members.