Intern, Data Governance, Risk, & Compliance (GRC)- EN
About the role
At CN, we are committed to our pursuit of excellence. We take pride in delivering work of the highest standard, continually innovating to shape the railroad of the future. As responsible railroaders, we make the right decisions every time, putting safety first, acting with unwavering integrity, and holding ourselves accountable for our actions. We believe in succeeding together—by fostering inclusivity and collaboration, we sustainably deliver exceptional results for our customers.
We welcome students aboard to join our team and play a valuable role in the engine that keeps the North American economy on track. Expect an exciting environment where you’ll be encouraged to learn, grow, and be recognized for your unique ideas and contributions. Work on pivotal projects with experienced collaborators who will encourage you to share your perspectives, and thrive in our close-knit, safety-focused culture. The careers we offer are meaningful because the work we do matters. Join us and get your career moving!
Intern, Data Governance, Risk, & Compliance (GRC) This is a full-time summer internship lasting from May 11, 2026, until August 28, 2026.
Job Summary The Intern, Governance, Risk and Compliance (GRC) is responsible to execute the activities supporting the GRC framework and processes. The incumbent supports the GRC team in maintaining its security posture through governance, risk and compliance. The GRC team provides the Chief Information Security Office’s (CISO) primary leadership on maintaining, supporting, and operating the CN Information Security GRC framework, including information security classification, risk management processes, and security related policies. In addition, the GRC team communicates, oversees and supports security recommendations to meet business objectives, provides governance over control activities, and ensures adherence to regulatory and information security requirements.
Main Responsibilities
- Assist the GRC team to develop, maintain, and update security documentation such as policies, procedures, guidelines, standards, or requirements
- Process various security requests and intakes assigned to the GRC team
- Contribute to the documentation and follow-ups on issues related to security violations, policy and compliance exceptions, including recommendations for addressing any identifying control weaknesses
- Assist in the collection and processing of Cybersecurity metrics
Requirements
- Follows safety procedures, information security instructions and Environmental, Social and Governance (ESG) principles to lead by example
- Inspires others with impactful communications and adapts to the audience
- Applies analytical thinking to make recommendations that pursue sustainable performance
- Knowledge of securing network technologies, client and server operating system and applications
- Knowledge of some Operational and Information Security Risk Management frameworks
- Knowledge of some industry cybersecurity frameworks
- Collaborates with key internal stakeholders to enable higher productivity
- Fluent in both written and verbal in English
- Fluent in both written and verbal in French*
Education
- Working towards a Bachelor’s Degree in Information Security or Cybersecurity*
- Any experience/education/skills/knowledge for these above would be considered as an asset
About CN CN is a premium railroad that sustainably generates value for our customers, shareholders, employees, and stakeholders with an unwavering commitment to safety and service. Essential to the economy, to the customers, and to the communities it serves, CN safely transports more than 300 million tons of natural resources, manufactured products, and finished goods throughout North America every year. CN's network connects Canada's Eastern and Western coasts with the U.S. South through a 20,000-mile rail network. CN and its affiliates have been contributing to community prosperity and sustainable trade since 1919. CN powers the North American economy and is committed to programs supporting social responsibility and environmental stewardship.
At CN, we are dedicated to building North America's safest , most inclusive and sustainable railroad, which includes reflecting the communities in which we operate. Research shows that candidates often don't apply unless they feel they fit the job posting at 100%. To all potential applicants, even if you don't meet every job requirement listed in a posting, we still encourage you to apply. If you require an accommodation for the recruitment process (including alternate formats of materials, accessible meeting rooms or other accommodations), please get in touch with our team at cnrecruitment@cn.ca .
As an equal opportunity employer, qualified candidates will receive consideration for employment without regard to race, color, religion, sex, sexual orientation, gender identity, national origin, disability, protected veteran status, and other protected status as required by applicable law.
Please monitor your email on a regular basis as communication to applicants is done via email.
About CN
CN is a North American transportation and logistics leader focused on supply chain innovation and collaboration. We offer integrated shipping solutions, including rail, intermodal, trucking, freight forwarding, warehousing and distribution.
We are an engaged corporate citizen, committed to the safety of our employees, customers and the public. CN is invested in building shareholder value and stronger communities, focused on environmental stewardship and developing an exceptional environment in the workplace.
CN has the expertise, the network reach and the capacity to move your goods to a global marketplace in a safe, timely and cost effective manner.
Welcome to CN, North America's Railroad.
Intern, Data Governance, Risk, & Compliance (GRC)- EN
About the role
At CN, we are committed to our pursuit of excellence. We take pride in delivering work of the highest standard, continually innovating to shape the railroad of the future. As responsible railroaders, we make the right decisions every time, putting safety first, acting with unwavering integrity, and holding ourselves accountable for our actions. We believe in succeeding together—by fostering inclusivity and collaboration, we sustainably deliver exceptional results for our customers.
We welcome students aboard to join our team and play a valuable role in the engine that keeps the North American economy on track. Expect an exciting environment where you’ll be encouraged to learn, grow, and be recognized for your unique ideas and contributions. Work on pivotal projects with experienced collaborators who will encourage you to share your perspectives, and thrive in our close-knit, safety-focused culture. The careers we offer are meaningful because the work we do matters. Join us and get your career moving!
Intern, Data Governance, Risk, & Compliance (GRC) This is a full-time summer internship lasting from May 11, 2026, until August 28, 2026.
Job Summary The Intern, Governance, Risk and Compliance (GRC) is responsible to execute the activities supporting the GRC framework and processes. The incumbent supports the GRC team in maintaining its security posture through governance, risk and compliance. The GRC team provides the Chief Information Security Office’s (CISO) primary leadership on maintaining, supporting, and operating the CN Information Security GRC framework, including information security classification, risk management processes, and security related policies. In addition, the GRC team communicates, oversees and supports security recommendations to meet business objectives, provides governance over control activities, and ensures adherence to regulatory and information security requirements.
Main Responsibilities
- Assist the GRC team to develop, maintain, and update security documentation such as policies, procedures, guidelines, standards, or requirements
- Process various security requests and intakes assigned to the GRC team
- Contribute to the documentation and follow-ups on issues related to security violations, policy and compliance exceptions, including recommendations for addressing any identifying control weaknesses
- Assist in the collection and processing of Cybersecurity metrics
Requirements
- Follows safety procedures, information security instructions and Environmental, Social and Governance (ESG) principles to lead by example
- Inspires others with impactful communications and adapts to the audience
- Applies analytical thinking to make recommendations that pursue sustainable performance
- Knowledge of securing network technologies, client and server operating system and applications
- Knowledge of some Operational and Information Security Risk Management frameworks
- Knowledge of some industry cybersecurity frameworks
- Collaborates with key internal stakeholders to enable higher productivity
- Fluent in both written and verbal in English
- Fluent in both written and verbal in French*
Education
- Working towards a Bachelor’s Degree in Information Security or Cybersecurity*
- Any experience/education/skills/knowledge for these above would be considered as an asset
About CN CN is a premium railroad that sustainably generates value for our customers, shareholders, employees, and stakeholders with an unwavering commitment to safety and service. Essential to the economy, to the customers, and to the communities it serves, CN safely transports more than 300 million tons of natural resources, manufactured products, and finished goods throughout North America every year. CN's network connects Canada's Eastern and Western coasts with the U.S. South through a 20,000-mile rail network. CN and its affiliates have been contributing to community prosperity and sustainable trade since 1919. CN powers the North American economy and is committed to programs supporting social responsibility and environmental stewardship.
At CN, we are dedicated to building North America's safest , most inclusive and sustainable railroad, which includes reflecting the communities in which we operate. Research shows that candidates often don't apply unless they feel they fit the job posting at 100%. To all potential applicants, even if you don't meet every job requirement listed in a posting, we still encourage you to apply. If you require an accommodation for the recruitment process (including alternate formats of materials, accessible meeting rooms or other accommodations), please get in touch with our team at cnrecruitment@cn.ca .
As an equal opportunity employer, qualified candidates will receive consideration for employment without regard to race, color, religion, sex, sexual orientation, gender identity, national origin, disability, protected veteran status, and other protected status as required by applicable law.
Please monitor your email on a regular basis as communication to applicants is done via email.
About CN
CN is a North American transportation and logistics leader focused on supply chain innovation and collaboration. We offer integrated shipping solutions, including rail, intermodal, trucking, freight forwarding, warehousing and distribution.
We are an engaged corporate citizen, committed to the safety of our employees, customers and the public. CN is invested in building shareholder value and stronger communities, focused on environmental stewardship and developing an exceptional environment in the workplace.
CN has the expertise, the network reach and the capacity to move your goods to a global marketplace in a safe, timely and cost effective manner.
Welcome to CN, North America's Railroad.