SA&A; Consultant (2+ years) to undertake security assessment and authorization activities using ITSG-33 security controls Our public sector client is seeking a SA&A; Consultant (2+ years) to undertake security assessment and authorization activities using ITSG-33 security controls There is an IT Security Compliance requirement to have a local security assessment to be done in order to permit a commercial software (SaaS) to sit in the cloud. Additionally, there is also a requirement to contribute to additional SA&A; assessment for other aspects of the project. Responsibilities
- Conduct and/or manage IT Security Authorization and Accreditation (SA&A;) assessments that include, but are not limited to, the following: security impact assessments, threat risk assessments, vulnerabilities assessments, privacy impact assessments, business impact assessments, and compliance testing of security requirements (Security Requirements Traceability Matrix)
- Review, analyze, create, and/or update relevant SA&A; documentation, such as: Concept of Operations, IT Security Architecture, Statement of Sensitivity, and Statement of Acceptable Risk
- Analyze, review, and make recommendations vis-a-vis the IT Security posture of a system
- Develop and test system Disaster Recovery Plans
- Assess compliance with applicable security policies and standards Must Haves:
- SA&A;




- 2+ years Our public sector client is seeking a SA&A; Consultant (2+ years) to undertake security assessment and authorization activities using ITSG-33 security controls There is an IT Security Compliance requirement to have a local security assessment to be done in order to permit a commercial software (SaaS) to sit in the cloud. Additionally, there is also a requirement to contribute to additional SA&A; assessment for other aspects of the project. Responsibilities
- Conduct and/or manage IT Security Authorization and Accreditation (SA&A;) assessments that include, but are not limited to, the following: security impact assessments, threat risk assessments, vulnerabilities assessments, privacy impact assessments, business impact assessments, and compliance testing of security requirements (Security Requirements Traceability Matrix)
- Review, analyze, create, and/or update relevant SA&A; documentation, such as: Concept of Operations, IT Security Architecture, Statement of Sensitivity, and Statement of Acceptable Risk
- Analyze, review, and make recommendations vis-a-vis the IT Security posture of a system
- Develop and test system Disaster Recovery Plans
- Assess compliance with applicable security policies and standards Must Haves:
- SA&A;
- 2+ years
- Secret Clearance Disclaimer: AI may be used in evaluating candidates. This posting is for an existing vacancy.

📌 SA&A Consultant (Montreal)
🏢 S.I. Systems
📍 Montreal