Senior Secret Cleared Cyber Security Consultant to create standardized processes for SA&A adhering to Guardrail policies within the Public sector

Our Valued Public Sector Client is seeking the services of a Senior Secret Cleared Cyber Security Consultant to create formalized processes for SA&A adhering to Guardrail policies within the Public sector.

Description:

Our Valued Client requires support with their continuous improvement and modernization efforts by leveraging skillsets in access management, infrastructure management, risk assessment and management, IT security and IT operations, to optimize internal and external stakeholder applications and services that align with their mandates. Information Technology (IT) Security Consultant services to work on an IT security framework and related policies. The Consultant will be required to review, support and work on a comprehensive document that identifies all the results of the audits, Security Assessment and Authorization (SA&A) and Threat Risk Assessments (TRA) on various IT projects.

Tasks:

• Provide subject matter expertise and assist in the planning, conduct and support to the implementation of recommendations associated with Security Assessment and Authorization (SA&A) processes;
• Evaluate the evidence that is collected for each security control;
• Assesses if control was implemented according to the standard in use, that it meets the standard and that it is effective;
• Complete of the assessment of the ITSG-33 for MS Power Platform Software as a Service (SaaS) for PBMM profile Security Requirements Traceability Matrix (SRTM) assessment;
• Identify and assess impact from current threat and vulnerabilities to Power Platform.
• Review existing NSERC/SSHRC Concept of Operations documents
• Provide subject matter expertise and assist in the planning, conduct and support to the implementation of recommendations associated with Privacy Impact Assessment (PIA) Security Authorization and Accreditation (SA&A) processes;
• Documentation and input into PIAs, TRAs/SA&As and related assessment processes;
• Recommendations on enhancements to solutions based on the outcomes of PIAs, SA&As, Third Party Reviews and other assessment processes;

Must Have:

• 10+ years SA&A and TRA Experience
• Reliability/Secret Clearance
• Extensive experience with safeguards and Government of Canada Guardrail (ITSG-33) policies
• TOGAF Certification