Senior IT Security SA&A; Assessor (Secret, 10+ years) to develop, assess, and authorize security documentation for a enterprise-wide modernization program within the public sector - 064
Job Type: Contract

Positions to fill: 1

Job End Date: Mar 31, 2027

Pay Rate: Daily: Negotiable

Job ID: 155939

Our public sector client is seeking a Senior IT Security SA&A; Assessor (Secret, 10+ years) to develop, assess, and support the authorization of security documentation for an enterprise-wide modernization program within the public sector.

Join a federal cybersecurity initiative supporting Security Assessment and Authorization (SA&A;) activities across multiple departmental technology projects. This role covers the planning, execution, and completion of SA&A; deliverables, including SAQs, SCTMs, SoSARs, security evidence reviews, and risk documentation. The successful candidate will assess cloud and on-premises IT systems to ensure alignment with Government of Canada and departmental IT security requirements while supporting a major modernization program.

Contract, Remote, Working Hours: EST

Must Haves

Secret security clearance

10+ years of relevant IT security experience

ITSG-33 security control tailoring and SCTM development

Azure DevOps (ADO) experience updating SCTMs, documenting vulnerabilities, conducting risk analysis, and assigning control risk ratings

Experience conducting SA&A; within the Government of Canada

Experience assessing Microsoft Azure cloud environments

Responsibilities

Guide business and project teams in completing Security Assessment Questionnaires (SAQs)

Conduct Detailed Security Categorization (DSC)



activities in alignment with Government of Canada security guidance

Review, develop, and tailor Security Control Traceability Matrices (SCTMs) based on system scope, solution architecture, and applicable security controls

Coordinate the collection, review, and submission of security evidence packages to support assessment activities

Update SCTMs in Azure DevOps (ADO), including documenting vulnerabilities, conducting risk analysis, and assigning control risk ratings

Support the development, review, and refinement of SA&A; security documentation, including SoSARs, risk assessments, and authorization artefacts

Upload finalized SA&A; documentation to designated collaboration repositories and complete project closeout activities

Our public sector client is seeking a Senior IT Security SA&A; Assessor (Secret, 10+ years) to develop, assess, and support the authorization of security documentation for an enterprise-wide modernization program within the public sector.

Join a federal cybersecurity initiative supporting Security Assessment and Authorization (SA&A;) activities across multiple departmental technology projects. This role covers the planning, execution, and completion of SA&A; deliverables, including SAQs, SCTMs, SoSARs, security evidence reviews, and risk documentation.



The successful candidate will assess cloud and on-premises IT systems to ensure alignment with Government of Canada and departmental IT security requirements while supporting a major modernization program.

Contract, Remote, Working Hours: EST

Must Haves

Secret security clearance

10+ years of relevant IT security experience

ITSG-33 security control tailoring and SCTM development

Azure DevOps (ADO) experience updating SCTMs, documenting vulnerabilities, conducting risk analysis, and assigning control risk ratings

Experience conducting SA&A; within the Government of Canada

Experience assessing Microsoft Azure cloud environments

Responsibilities

Guide business and project teams in completing Security Assessment Questionnaires (SAQs)

Conduct Detailed Security Categorization (DSC) activities in alignment with Government of Canada security guidance

Review, develop, and tailor Security Control Traceability Matrices (SCTMs) based on system scope, solution architecture, and applicable security controls

Coordinate the collection, review, and submission of security evidence packages to support assessment activities

Update SCTMs in Azure DevOps (ADO), including documenting vulnerabilities, conducting risk analysis, and assigning control risk ratings

Support the development, review, and refinement of SA&A; security documentation, including SoSARs, risk assessments, and authorization artefacts

Upload finalized SA&A; documentation to designated collaboration repositories and complete project closeout activities

Disclaimer:
AI may be used in evaluating candidates.

This posting is for an existing vacancy.

#J-18808-Ljbffr

📌 Senior IT Security SA&A Assessor (Secret, 10+ years) to develop, assess, and authorize security docu (Manitoba)
🏢 S.i. Systems
📍 Manitoba