McGill School of Continuing Studies - Fall 2025

Paid
Open to private marketplace Closing on September 11, 2025
Main contact
McGill School of Continuing Studies
Montreal, Quebec, Canada
Level UP Private Experiences
Administrator
(41)
Timeline
  • October 6, 2025
    Experience start
  • October 1, 2025
    Applications due date
  • November 22, 2025
    Riipen/McGill SCS Spotlight
  • November 29, 2025
    Experience end
Experience
3/24 project matches
Dates set by experience
Agreements required
2 projects max per company
C$1,400.00
Portal pays 100%

Total pay is C$1,400.00 per learner.

Preferred companies
Canada Required
Any company type
Any industries
Company verification required

Companies must complete verification in order to match with experience.

Experience scope

Categories
Security (cybersecurity and IT security) Data analysis Project management Cloud technologies
Skills
systems thinking interpersonal communications project management cyber security assessment cloud security data analysis
Learner goals and capabilities

The McGill School of Continuing Studies, in partnership with Riipen, offers a unique opportunity for learners to gain practical experience in the Canadian workplace. Participants, who include professionals and newcomers to Canada, bring diverse international experiences and fresh perspectives. This experience allows learners to bridge the gap between education and career success by working on short-term, impactful projects.


We’re currently looking for projects in the following categories:

cybersecurity, cloud security, project management, data analytics, market research, marketing & communications, finance and accounting, and supply chain management.


Learners work on 60-hour, short-term projects and are paid a $1,400 stipend directly by Riipen, thanks in part to the Government of Canada’s Innovative Work-Integrated Learning (I-WIL) Initiatives program. This means there’s no cost to you.


Project timeline:

Request to match your project: July 28 - September 10, 2025

  • Program administrators will review all requests and let you know if changes are needed to set the project up for success.

Students invited to join: September 15, 2025

Students apply to projects: September 15 - 30, 2025

  • Student will apply to projects. You must review applications and accept your team(s) during this period.

Max project start date: October 6, 2025

Max project end date: November 28, 2025


For more program details, see our landing page for employers

Learners

Learners
Workforce Development
Beginner, Intermediate levels
42 learners
Project
60 hours per learner
Learners apply to projects; 4 applications per learner
Individual projects
Up to 3 team(s) or 3 learner(s) per project.
Each learner can join up to one team
Expected outcomes and deliverables

Projects require clearly defined deliverables outlined in the project description. Deliverables include the working documents and the final project uploaded for review and payment. This may encompass source code, presentations, reports etc.


To validate completion, students submit deliverables as uploaded files with a reflection note. Tangible proof or samples of completed work are necessary, with redacted deliverables if under a Non-Disclosure Agreement (NDA).

Project timeline
  • October 6, 2025
    Experience start
  • October 1, 2025
    Applications due date
  • November 22, 2025
    Riipen/McGill SCS Spotlight
  • November 29, 2025
    Experience end

Project examples

1) Applied Cyber Security


Cyber security risk assessment & mitigation strategy

Objective: Evaluate the cybersecurity posture of a small-to-medium business or simulated environment. Identify vulnerabilities, assess risks, and develop a prioritized mitigation plan aligned to industry standards (e.g. NIST, ISO)


Skills Required: threat modeling, NIST cybersecurity framework, project documentation, remediation systems, stakeholder communications


Activities:

  • Review the organization’s IT environment or case study
  • Conduct asset identification and classification
  • Identify potential threats, vulnerabilities and business impacts
  • Use a basic risk matrix to assess severity and likelihood
  • Align findings with NIST or ISO compliance frameworks
  • Recommend controls and remediation actions
  • Draft a formal cybersecurity risk assessment report
  • Create a visual summary or infographic for stakeholder communication


Deliverables:

  • Cybersecurity risk assessment report
  • Risk matrix and prioritization table
  • Remediation plan with recommended controls
  • Executive summary slide deck or infographic


SOC 2 Compliance roadmap development 

Objective: Create a comprehensive roadmap on how to reach SOC2 compliance. 


Skills Required: SOC2 audition, security controls, audit process, industry standards, relationship building, auditing 


Activities:

  • Create the following as part of the compliance roadmap
  • list of key security controls
  • timeline for implementation
  • preparation plan for audit purposes 


Deliverables:

  • SOC2 compliance roadmap
  • Summary report highlighting critical steps and resources needed


Cybersecurity framework and awareness training 

Objective: Develop and implement a comprehensive cybersecurity framework.  


Skills Required: incident response, endpoint security, secure password authentication, NIST cybersecurity framework, resilience, developing training materials, cyber security, project scoping


Activities:

  • Conduct a risk assessment 
  • Create key cybersecurity policies (e.g. data protection, acceptable use, incident response)
  • Document security standards and practices
  • Develop training materials on the basics of cybersecurity, focusing on safe online practices, recognizing phishing attacks, secure password creation and safe data handling 
  • Provide recommendations to enhance data security based on risk assessment
  • Create a comprehensive response plan for handling potential cyber threats and attacks
  • Guidance on implementing endpoint security, data encryption, regular audits and employee vigilance measure 


Deliverables:

  • Final report detailing policies, training, recommendations and the response plan


2) Cloud Security


Secure cloud architecture design for small enterprise

Objective: Design a secure cloud infrastructure for a growing small business, incorporating access controls, data privacy, and basic intrusion detection capabilities.


Skills Required: Cloud computing architecture (IaaS, PaaS), identity & access management (IAM), encryption methods, AWS/Azure/GCP


Activities:

  • Assess the business’s current and future cloud needs
  • Design a secure cloud deployment model with defined access levels
  • Integrate basic intrusion detection tools and logging policies
  • Create implementation documentation and a security walkthrough


Deliverables:

  • Secure cloud architecture blueprint
  • Implementation guide and access control matrix
  • Security feature summary and risk mitigation plan


Cloud risk assessment and compliance audit

Objective: Conduct a security audit of a company’s cloud services using recognized standards and frameworks (e.g., NIST, ISO/IEC 27017).


Skills Required: Risk assessment, compliance frameworks, policy analysis, cybersecurity tools


Activities:

  • Review current cloud security documentation and configurations
  • Map controls to compliance standards
  • Assess vulnerabilities and potential exposure
  • Provide risk ratings and prioritized recommendations


Deliverables:

  • Compliance gap analysis report
  • Cloud risk matrix and mitigation plan
  • Executive summary presentation for leadership


Blockchain-enhanced access control system

Objective: Design a proof-of-concept for a cloud-based access control system leveraging blockchain technology for auditability and integrity.


Skills Required: Blockchain fundamentals, smart contracts, access control models, cloud services


Activities:

  • Explore use cases of blockchain in identity and access management
  • Design the logic for decentralized access logging
  • Develop a simple prototype (e.g., using Hyperledger or Ethereum testnets)
  • Analyze the pros and cons of blockchain vs. traditional models


Deliverables:

  • System design document
  • Functional prototype or demo
  • Security benefits and limitations report


Cloud incident response simulation

Objective: Simulate a real-world security breach in a cloud environment, investigating the threat, analyzing its impact, and designing an incident response protocol.


Skills Required: Digital forensics, log analysis, intrusion detection, incident response planning


Activities:

  • Set up a simulated cloud environment with built-in vulnerabilities
  • Conduct a mock attack (e.g., privilege escalation or DDoS)
  • Investigate using logs, access patterns, and tools
  • Draft an incident response and recovery plan


Deliverables:

  • Incident investigation report
  • Root cause analysis with forensic evidence
  • Incident response playbook


DevSecOps policy and integration plan

Objective: Create a DevSecOps integration roadmap for a mid-size SaaS company, embedding security best practices into development and deployment workflows.


Skills Required: DevSecOps principles, CI/CD pipelines, threat modeling, cloud-native tools (e.g., containers, Kubernetes)


Activities:

  • Analyze existing development workflows
  • Identify security risks in software delivery
  • Recommend tools and processes to integrate security
  • Create a phased DevSecOps implementation plan


Deliverables:

  • DevSecOps integration strategy
  • Risk map of the software pipeline
  • Tool recommendations and phased rollout plan


3) Data


Data Cleaning and Visualization 

Objective: Clean, analyze, and visualize trends in a dataset (e.g., city bike rentals, survey data). 


Skills Required: Excel or Google Sheets, Tableau/Power BI. 


Activities: 

  • Remove duplicates, normalize values, create calculated fields. 
  • Design 3–5 meaningful visualizations. 
  • Extract simple insights and actionable recommendations.


Deliverables: 

  • Clean dataset (CSV or Excel) with documentation 
  • 1 dashboard (PDF or link) with 3–5 interactive visuals 
  • Summary insights report (2–3 pages)


Predictive Analytics for Customer Churn

Objective: Predict customer churn using logistic regression or decision trees. 


Skills Required: Python, scikit-learn, pandas, basic ML theory. 


Activities: 

  • Clean and explore a dataset (e.g., telecom churn data). 
  • Train/test a classification model. 
  • Evaluate accuracy, precision, recall. 


Deliverables: 

  • Jupyter notebook with code and visualizations 
  • Model evaluation summary (1–2 pages) 
  • Recommendations for business based on prediction patterns


Analyze a Sustainability Dataset

Objective: Analyze a large sustainability dataset and create data visualizations that communicate key insights.  


Skills Required: Data literacy. Exploratory data analysis, insight extracts, oral and visual communication 


Activities: 

  • Data exploration and insight discovery 
  • Visualization design drafting 
  • Refinement and user testing 
  • Presentation and communication plan


ESG Analytics in Sustainable Manufacturing Management

Objective: Do an ESG (Environmental, Social and Governance) assessment for a manufacturing firm using advanced analytical tools and frameworks.  


Skills Required: ESG Frameworks, Sustainability in Manufacturing, Data literacy, IBM Envizi 

 

Activities: 

  • Investigate key ESG issues in manufacturing operations.
  • Evaluate and interpret ESG data (either real or simulated). 
  • Explore how tools like IBM Envizi ESG Suite facilitate sustainability analytics. 
  • Present insights and recommendations based on ESG report outputs.


4) Project Management


Project scoping and feasibility assessment 

Objective: Create a project plan for the launch of a mobile app. 


Skills Required: Project planning, risk analysis, MS Project or Google Sheets. 


Activities: 

  • Define scope, deliverables, timelines, and stakeholders. 
  • Develop a Gantt chart and risk matrix. 
  • Create a simplified budget estimate. 


Deliverables: 

  • Project charter document (2–3 pages) 
  • Timeline and Gantt chart 
  • Risk register and stakeholder matrix


Agile Project Simulation

Objective: Support a 2-week agile sprint for a product team. 


Skills Required: Agile/Scrum framework, backlog management tools (e.g., Trello, Jira). 


Activities: 

  • Define user stories and organize sprint backlog. 
  • Conduct simulated sprint planning and review. 
  • Track sprint progress and retrospective feedback.


Deliverables: 

  • Sprint backlog with 8–12 user stories 
  • Burndown chart and task tracking board 
  • Sprint retrospective summary (2 pages)

Additional company criteria

Companies must answer the following questions to submit a match request to this experience:

  • Q1 - Multiple choice
    What is your industry sector?  *
    • Agriculture, Fishing, Forestry
    • Arts, Media, Entertainment, Cultural Industries
    • Aviation & Aerospace
    • Energy and Utilities
    • + 12 options
  • Q2 - Multiple choice
    What is the size of your organization?  *
    • Large (500+)
    • Medium (100 - 499)
    • Small (10 - 99)
    • Micro (0-9)
  • Q3 - Text short
    What is the postal code of your business?  *
  • Q4 - Text short
    Please provide your business number (BN)  *
  • Q5 - Multiple choice
    What type of number did you provide?  *
    • Federal (CRA-issued 9-digit BN)
    • Provincial or Municipal
    • Quebec 10-digit NEQ
    • Registered Charity Number
    • + 8 options
  • Q6 - Multiple choice
    Is the leadership of your organization (founding employees/executives/etc.) a member of at least one of the following demographic groups?  *
    • A member of an Official Language Minority Community (my first language is English and I'm from Quebec, or French and I'm from another province/territory)
    • A visible minority
    • A woman in STEM or another discipline where women are underrepresented
    • Newcomer to Canada (Canadian Citizens, permanent residents and refugees with valid work permits who have immigrated to Canada within the last five years)
    • + 5 options
  • Q7 - Checkbox
     *
  • Q8 - Checkbox
     *
  • Q9 - Multiple choice
    Are you a private business, non-profit, or public sector organization?  *
    • Private
    • Non-Profit
    • Public