Our public sector client is seeking a SA&A; Consultant (2+ years) to undertake security assessment and authorization activities using ITSG-33 security controls There is an IT Security Compliance requirement to have a local security assessment to be done in order to permit a commercial software (SaaS) to sit in the cloud.

Additionally, there is also a requirement to contribute to additional SA&A; assessment for other aspects of the project.

Responsibilities Conduct and/or manage IT Security Authorization and Accreditation (SA&A;) assessments that include, but are not limited to, the following: security impact assessments, threat risk assessments, vulnerabilities assessments, privacy impact assessments, business impact assessments,



and compliance testing of security requirements (Security Requirements Traceability Matrix) Review, analyze, create, and/or update relevant SA&A; documentation, such as: Concept of Operations, IT Security Architecture, Statement of Sensitivity, and Statement of Acceptable Risk Analyze, review, and make recommendations vis-a-vis the IT Security posture of a system Develop and test system Disaster Recovery Plans Assess compliance with applicable security policies and standards Must Haves: SA&A; - 2+ years Secret Clearance

📌 SA&A Consultant (2+ years) to undertake security assessment and authorization activities using Isecurity controls (Toronto)
🏢 S.i. Systems
📍 Toronto