Building the space between proven and possible, MDA Space is a trusted mission partner to the global space industry. A robotics, satellite systems and geointelligence pioneer with a 55-year+ story of world firsts and more than 450 missions, MDA Space is a global leader in communications satellites, Earth and space observation, and space exploration and infrastructure. The global MDA Space team of more than 3,800 space experts has the knowledge and know-how to turn an audacious customer vision into an achievable mission – bringing to bear a one-of-a-kind mix of experience, engineering excellence and wide-eyed wonder that’s been in our DNA since day one.

For those who dream big and push boundaries on the ground and in the stars to change the world for the better, we’ll take you there.

Are you ready to launch the next stage of your career in the new space economy? We would love to hear from you!

We’re on the hunt for an IT Risk & Compliance Co-Op on our team at either of our Brampton, Montreal or Richmond offices.

Supporting all of MDA’s three business areas in Geointelligence, Robotics & Space Operations, and Satellite Systems, our corporate team knows from experience that working in a hands-on learning environment enables us to collaborate across disciplines and get the job done. From HR and Finance to IT and Communications, we are all committed to reaching new heights and advancing humanity’s place in the universe and here on Earth.

This role supports the identification, assessment, and management of information technology and cybersecurity risks in alignment with industry standards, regulatory requirements, and organizational controls. The position focuses on IT risk and compliance activities, including risk management, control assurance, and policy governance. The successful candidate will gain hands-on experience supporting Governance, Risk, and Compliance (GRC) processes across the organization.

Responsibilities

• Support internal cybersecurity audits (e.g., NIST Cybersecurity Framework, UK Cyber Essentials, NIST SP 800-171), including assisting with planning activities, gathering audit evidence across multiple domains, and liaising with stakeholders to resolve blockers
• Assist with testing control effectiveness, documenting audit findings, and tracking remediation activities to closure under guidance
• Support Enterprise Risk Management (ERM) and Insider Threat risk initiatives by assisting with risk documentation, maintaining supporting artifacts, and supporting quarterly/Annual risk assessment reviews
• Assist with maintaining the IT risk register by ensuring records are current and supporting the preparation and updating of risk summary decks for
• Support Third-Party Risk Management activities, including assisting with vendor risk assessments and tracking due diligence documentation
• Contribute to exceptions management by documenting requests and tracking approvals and closures
• Collect and organize metrics for IT risk and compliance reporting
• Review and update policies, standards, and guidelines as required
• Support the administration and use of GRC tools such as Optro (AuditBoard)
• Assist with other duties as required to support Governance, Risk, and Compliance (GRC) initiatives

Requirements/Desired Qualifications

• Currently enrolled in a college or university program in information security, cybersecurity, computer science, information technology, information systems, risk management, business technology management, engineering, or a closely related field with an interest in IT risk, audit, or compliance
• Foundational knowledge of security standards and frameworks such as ISO/IEC 27001 and the NIST Cybersecurity Framework
• Strong analytical, problem‑solving,