Our public sector client is seeking a Senior IT Security SA&A; (Secret, 10+ years) to develop, assess, and authorize security documentation using Security Assessment and Authorization (SA&A;) processes for on-premise and cloud IT systems Join a federal cybersecurity initiative supporting Security Assessment and Authorization (SA&A;) activities across multiple departmental technology projects.

This role supports the planning, execution, and completion of SA&A; deliverables including SAQs, SCTMs, SoSARs, evidence reviews, and risk documentation within MS Dynamics-related environments.

The engagement includes work across cloud and on-premise IT systems aligned with Government of Canada and departmental IT security requirements.

Full time, Remote, Working Hours: EST Must Haves 10+ years in Cyber Security focused on Security Assessment and Authorization (SA&A;) Secret security clearance ITSG-33 security control tailoring and SCTM development Azure Dev

Ops (ADO) for SCTM updates, vulnerability documentation,



and risk analysis Information Technology Security specialization Nice to Have MS Dynamics setting support Security Assessment Questionnaire (SAQ) review and validation Statement of Sensitivity and Acceptable Risk (SoSAR) preparation Responsibilities Guide business and project teams in completing Security Assessment Questionnaires (SAQs) Complete Detailed Security Categorization (DSC) activities aligned with Government of Canada security guidance Review and tailor Security Control Traceability Matrices (SCTMs) based on system scope and solution architecture Coordinate the collection and submission of security evidence packages for assessment activities Update SCTMs in Azure Dev

Ops (ADO) with vulnerabilities, risk analysis, and control risk ratings Support preparation and refinement of SA&A; security documentation and authorization artefacts Upload finalized SA&A; documentation to designated collaboration repositories and close project channels

📌 Senior IT Security SA&A (Secret, 10+ years) to develop, assess, and authorize security documentation using Security Assessment and Authorization (SA&A) processes for on-premise and cloud IT systems
🏢 S.i. Systems
📍 Ottawa