Senior IT Security SA&A Assessor (Secret, 10+ years) to develop, assess, and authorize security documentation for a enterprise-wide modernization program within the public sector - 064

S I Systems; Canada; Remote; CAD 129,000 - 203,000; Full time

Job summary

S.I. Systems Ltd. seeks a Senior IT Security SA&A Assessor (Secret, 10+ years) to develop, assess, and support authorization of security documentation for a major modernization program in the public sector. You will lead SA&A activities, coordinate evidence packages, and tailor SCTMs for Government of Canada standards across cloud and on‑prem environments.

Remote work with EST hours offered on a contract basis; security clearance and deep gov IT security experience are required.

Qualifications

• Secret security clearance is required.
• 10+ years of IT security experience.
• ITSG-33 security control tailoring and SCTM development.
• Azure DevOps (ADO) experience updating SCTMs, documenting vulnerabilities, conducting risk analysis, and assigning control risk ratings.
• Experience conducting SA&A within the Government of Canada.
• Experience assessing Microsoft Azure cloud environments.

Responsibilities

• Guide business and project teams in completing Security Assessment Questionnaires (SAQs).
• Conduct Detailed Security Categorization (DSC) activities in alignment with Government of Canada security guidance.
• Review, develop, and tailor Security Control Traceability Matrices (SCTMs) based on system scope, solution architecture, and applicable security controls.
• Coordinate the collection, review, and submission of security evidence packages to support assessment activities.
• Update SCTMs in Azure DevOps (ADO), including documenting vulnerabilities, conducting risk analysis, and assigning control risk ratings.
• Support the development, review, and refinement of SA&A security documentation, including SoSARs, risk assessments, and authorization artefacts.
• Upload finalized SA&A documentation to designated collaboration repositories and complete project closeout activities.

Skills

Secret security clearance

10+ years IT security experience

ITSG-33 security guidance

SCTM development

Azure DevOps experience

Government of Canada SA&A

Microsoft Azure cloud assessment

Tools

Azure DevOps (ADO)

Job description

Senior IT Security SA&A Assessor (Secret, 10+ years) to develop, assess, and authorize security documentation for a enterprise-wide modernization program within the public sector - 064

Job Type: Contract

Positions to fill: 1

Job End Date: Mar 31, 2027

Pay Rate: Daily: Negotiable

Job ID: 155939

Our public sector client is seeking a Senior IT Security SA&A Assessor (Secret, 10+ years) to develop, assess, and support the authorization of security documentation for an enterprise-wide modernization program within the public sector.

Join a federal cybersecurity initiative supporting Security Assessment and Authorization (SA&A) activities across multiple departmental technology projects. This role covers the planning, execution, and completion of SA&A deliverables, including SAQs, SCTMs, SoSARs, security evidence reviews, and risk documentation. The successful candidate will assess cloud and on-premises IT systems to ensure alignment with Government of Canada and departmental IT security requirements while supporting a major modernization program.

Contract, Remote, Working Hours: EST

Must Haves

• Secret security clearance
• 10+ years of relevant IT security experience
• ITSG-33 security control tailoring and SCTM development
• Azure DevOps (ADO) experience updating SCTMs, documenting vulnerabilities, conducting risk analysis, and assigning control risk ratings
• Experience conducting SA&A within the Government of Canada
• Experience assessing Microsoft Azure cloud environments

Responsibilities

• Guide business and project teams in completing Security Assessment Questionnaires (SAQs)
• Conduct Detailed Security Categorization (DSC) activities in alignment with Government of Canada security guidance
• Review, develop, and tailor Security Control Traceability Matrices (SCTMs) based on system scope, solution architecture, and applicable security controls
• Coordinate the collection, review, and submission of security evidence packages to support assessment activities
• Update SCTMs in Azure DevOps (ADO), including documenting vulnerabilities, conducting risk analysis, and assigning control risk ratings
• Support the development, review, and refinement of SA&A security documentation, including SoSARs, risk assessments, and authorization artefacts
• Upload finalized SA&A documentation to designated collaboration repositories and complete project closeout activities

Our public sector client is seeking a Senior IT Security SA&A Assessor (Secret, 10+ years) to develop, assess, and support the authorization of security documentation for an enterprise-wide modernization program within the public sector.

Join a federal cybersecurity initiative supporting Security Assessment and Authorization (SA&A) activities across multiple departmental technology projects. This role covers the planning, execution, and completion of SA&A deliverables, including SAQs, SCTMs, SoSARs, security evidence reviews, and risk documentation. The successful candidate will assess cloud and on-premises IT systems to ensure alignment with Government of Canada and departmental IT security requirements while supporting a major modernization program.

Contract, Remote, Working Hours: EST

Must Haves

• Secret security clearance
• 10+ years of relevant IT security experience
• ITSG-33 security control tailoring and SCTM development
• Azure DevOps (ADO) experience updating SCTMs, documenting vulnerabilities, conducting risk analysis, and assigning control risk ratings
• Experience conducting SA&A within the Government of Canada
• Experience assessing Microsoft Azure cloud environments

Responsibilities

• Guide business and project teams in completing Security Assessment Questionnaires (SAQs)
• Conduct Detailed Security Categorization (DSC) activities in alignment with Government of Canada security guidance
• Review, develop, and tailor Security Control Traceability Matrices (SCTMs) based on system scope, solution architecture, and applicable security controls
• Coordinate the collection, review, and submission of security evidence packages to support assessment activities
• Update SCTMs in Azure DevOps (ADO), including documenting vulnerabilities, conducting risk analysis, and assigning control risk ratings
• Support the development, review, and refinement of SA&A security documentation, including SoSARs, risk assessments, and authorization artefacts
• Upload finalized SA&A documentation to designated collaboration repositories and complete project closeout activities

Disclaimer:

AI may be used in evaluating candidates.

This posting is for an existing vacancy.