Stagiaire universitaire en Cybersécurité — Hospice général

Full description

Your Mission

As part of strengthening our cybersecurity system, you are involved in implementing a proof of concept (PoC) of a Governance, Risk and Compliance (GRM) platform. The objective of the course is to demonstrate the added value of a tool to centralize cyber risk management, security controls and compliance monitoring with key cybersecurity standards. You will work with the Cybersecurity team in close collaboration with the Head of Information Systems Security (RSSI). The course will build on existing methods, benchmarks and risk analyses within the institution. The objective is not to redefine existing governance or methodologies but to integrate them into a tool to improve the piloting, traceability and automation of RCMP activities. Your main activities Implementation of the RCMP platform

• You are involved in the installation, configuration and setting of the platform.
• You define and structure the governance objects required for the PoC.
• You configure the monitoring and validation workflows.

Cyber risk management and security controls

• You're taking over an existing cyber risk pilot perimeter.
• You integrate risks into the RCMP platform.
• You structure risk information.
• You are involved in improving operational risk monitoring.
• You identify the priority controls of the cybersecurity frameworks to be set up for the driver's perimeter.

Automation and reporting

• You are studying the automation capabilities offered by the platform.
• You configure the reporting mechanisms, reminders, periodic reviews, Action Tracking and dashboards, and propose indicators to control cybersecurity.
• You identify possibilities for integration with other tools in the IT ecosystem.

Analysis and recommendations

• You assess the strengths and limitations of the platform in the context of the institution.
• You document the choices made and the best practices identified.
• You make recommendations for a possible generalization of the solution.

Your profile During Master level training in a computer, cybersecurity, information systems or related field.

Skills sought

• Knowledge of ISO 27001, NIST or CIS standards is an asset.
• Good data analysis and modelling capability.
• Mastery of office tools and of Excel.
• An advantage is knowledge of automation (Python, PowerShell or equivalent).
• Experience with process, ticket or RCMP management tools is an asset
• Excellent ability to collaborate and communicate.
• Proposition strength and search for innovative solutions.
• Ability to synthesize and present results.

Type of contract: University internship Entry into office: February 2027 Duration of the internship: 6 months Activity rate: 100% Deadline for application: 23 October 2026 Please submit your complete file (CV, cover letter, highest level of training diploma, work certificates)