IT Security TRA and C&A Analyst (Level 3)

Maplesoft Group; Canada; Remote; CAD 80,000 - 100,000; Full time

Job summary

A consulting firm is seeking a Remote IT Security TRA and C&A Analyst (Level 3) for a Federal Government client. The role involves developing security documentation, conducting vulnerability assessments, and providing training. Ideal candidates have experience with Federal IT security policies and possess strong risk management skills. This position promotes a diverse and inclusive workplace.

Qualifications

• Experience in developing IT security policies and documentation.
• Familiarity with Federal, Provincial, or Territorial IT security policies.
• Ability to conduct security assessments and provide operational support.

Responsibilities

• Develop security documentation for risk management.
• Define IT Security roles and responsibilities.
• Conduct vulnerability assessments.

Skills

Risk management

Incident management

Vulnerability assessments

Policy development

Staff training

Education

Relevant degree in IT Security or related field

Tools

CSE guidelines and standards

Job description

Maplesoft implements TimeLive for Electronic time tracking.

Please view the demo below on how to enter and approve time.

Do you want to work in a dynamic environment where your contributions count?

At Maplesoft, we value the contributions of all our employees and contractors. We listen and act upon suggestions, advice, and innovative ideas to further our strategic vision. In turn, Maplesoft contributes to the communities where we live and operate. We think globally, but act in our own backyards.

Build your future with Maplesoft’s exciting technologies, deep partnerships, personal approach to consulting services, professional development opportunities and exciting company culture.

If you are interested in any of the following job openings, please apply directly to [e-mail], citing the position title and job id in the email subject line.

Position

IT Security TRA and C&A Analyst (Level 3) — Remote

Maplesoft Group is currently seeking a Remote IT Security TRA and C&A Analyst (Level 3) for our Federal Government client.

Responsibilities

• Develop security documentation in support of security assessment and authorization, in accordance with the Communications Security Establishment (CSE) guidance, including ITSG-33 ‘IT Security Risk Management: A Lifecycle Approach’. This includes security categorization, business needs for security, security concept of operations, security control profiles, detailed diagrams, security documentation, security test plans, and results.
• Develop IT Security policies, procedures, directives, standards, guidelines, and awareness materials, including staff training.
• Define IT Security roles and responsibilities within the organization.
• Develop security architectures and associated documentation.
• Deliver risk management documentation for programs, systems, or services, such as Certification Plans, Threat and Risk Assessments (TRAs), Privacy Impact Assessments (PIAs), Certification Reports, Technical Vulnerability Assessments, etc.
• Deliver system development documentation for programs, systems, or services, such as Concepts of Operation, Security Architectures, and Security Requirements Definitions.
• Provide IT security advice and guidance, including the review, analysis, and application of Federal, Provincial, or Territorial IT Security policies, IT Security products, best practices, and risk mitigation strategies.
• Provide IT operational support services related to incident management, including monitoring, response, and recovery.
• Conduct vulnerability assessments, including identification of threats to operating systems (e.g., MS, Unix, Linux, Novell), wireless architectures, and personnel, technical, physical, and procedural vulnerabilities.
• Conduct certification activities, including: developing Security Certification Plans; verifying that security safeguards meet applicable policies and standards; validating security requirements through design stages; conducting Security Testing and Evaluation (ST&E); assessing residual risk to determine acceptability.
• Conduct accreditation activities, including: reviewing certification results for design documentation; granting developmental, operational, or interim approvals based on acceptable risk levels and compliance with security policies and standards.
• Develop privacy-related policies and implementing a privacy governance framework; conducting Privacy Impact Assessments (PIAs) and Preliminary Privacy Impact Assessments (PPIAs) in accordance with Government of Canada requirements.
• Provide coaching and training to internal staff to develop their capacity in TRA and C&A analysis, including developing staff's skills and knowledge in IT Security TRA and C&A Analyst best practices, tools, and methodologies, with the goal of creating internal subject matter experts to support ongoing IT security assessments and authorizations.

Company and Diversity

Maplesoft Group prides itself on its distinct corporate culture and recognizes that success is a direct reflection of our most valuable asset - our people. Therefore, attitude and ambition are key personality traits we seek out, along with skill and aptitude, in potential employees.

Maplesoft Group is committed to having a diverse, representative workforce and continuing to build an inclusive environment. We encourage applications from all qualified individuals. Maplesoft Group is an equal opportunity employer committed to diversity and inclusion. We are pleased to consider all qualified applicants irrespective of race, color, religion, sex, sexual orientation, gender identity, national origin, age, disability, protected veterans’ status, Aboriginal peoples or any other legally protected factors.

All employment decisions are made based on business needs, job requirements, and individual qualifications. We are committed to developing inclusive, barrier-free recruitment and selection processes, and a work environment that supports our diverse workforce. Please let us know if you require accommodations at any stage of the recruitment process. We can be reached at Maplesoft Info at [e-mail].

We thank you for your interest in Maplesoft Group and wish to advise you that only candidates under consideration will be contacted.

Ready to Excel?

Think you\'re a great fit for our team? Explore our Job Opportunities page.