SA&A; Consultant (2+ years) to undertake security assessment and authorization activities using ITSG-33 security controls

Our public sector client is seeking a SA&A; Consultant (2+ years) to undertake security assessment and authorization activities using ITSG-33 security controls

There is an IT Security Compliance requirement to have a local security assessment to be done in order to permit a commercial software (SaaS) to sit in the cloud. Additionally, there is also a requirement to contribute to additional SA&A; assessment for other aspects of the project.

Responsibilities

- Conduct and/or manage IT Security Authorization and Accreditation (SA&A;) assessments that include, but are not limited to, the following: security impact assessments, threat risk assessments, vulnerabilities assessments, privacy impact assessments, business impact assessments, and compliance testing of security requirements (Security Requirements Traceability Matrix)
- Review, analyze, create, and/or update relevant SA&A; documentation, such as: Concept of Operations, IT Security Architecture, Statement of Sensitivity, and Statement of Acceptable Risk
- Analyze, review, and make recommendations vis-a-vis the IT Security posture of a system
- Develop and test system Disaster Recovery Plans
- Assess compliance with applicable security policies and standards

Must Haves:

- SA&A; - 2+ years





Our public sector client is seeking a SA&A; Consultant (2+ years) to undertake security assessment and authorization activities using ITSG-33 security controls

There is an IT Security Compliance requirement to have a local security assessment to be done in order to permit a commercial software (SaaS) to sit in the cloud. Additionally, there is also a requirement to contribute to additional SA&A; assessment for other aspects of the project.

Responsibilities

- Conduct and/or manage IT Security Authorization and Accreditation (SA&A;) assessments that include, but are not limited to, the following: security impact assessments, threat risk assessments, vulnerabilities assessments, privacy impact assessments, business impact assessments, and compliance testing of security requirements (Security Requirements Traceability Matrix)
- Review, analyze, create, and/or update relevant SA&A; documentation, such as: Concept of Operations, IT Security Architecture, Statement of Sensitivity, and Statement of Acceptable Risk
- Analyze, review, and make recommendations vis-a-vis the IT Security posture of a system
- Develop and test system Disaster Recovery Plans
- Assess compliance with applicable security policies and standards

Must Haves:

- SA&A; - 2+ years
- Secret Clearance

Disclaimer:
AI may be used in evaluating candidates.
This posting is for an existing vacancy.

📌 SA&A Consultant (Ottawa)
🏢 S.I. Systems
📍 Ottawa