Intermediate Information Technology Security TRA and CA&A Analyst Full Time NEW

We are looking for an Intermediate Information Technology Security TRA and CA&A Analyst for our client who meets the following criteria:

• Language: Bilingual – French + English

• Security Clearance: Secret

• Location of Work: Hybrid

• Mandatory requirements:
  • The bidder must have obtained a degree in Computer Science/Information Systems from an accredited Canadian university or college or an equivalent university accreditation recognized by GOC.
  • The bidder must demonstrate that the proposed resource has a minimum of 8 years (96 Months) experience within the past 12 years (144 months) completing each of the following tasks related to Security assessment and Authorization:
    • Developing and Analysing Data Security document
    • Developing and documenting Concepts of Operation (CONOPS)
    • Evaluating and aligning security controls with ITSG-33 frameworks.
    • Ensuring all systems operating within a classified network follow CDE approved methodologies
  • The bidder must demonstrate that the proposed resource has a minimum of 8 years (96 Months) experience within the past 12 years (144 months) completing each of the following tasks related Threat and Risk Assessments.
    • Conducting security reviews of multiple applications as part of a migration from on prem to cloud of high value systems.
    • Developing roadmaps for the secure migration of highavailability tier 1 applications.
    • Conducting full system analysis, reviews, and documentation to provide Interim Authority to Operate and Authority to Operate approvals.
    • Working with senior leaders to develop system contingency/redundancy plans and service level agreements (SLAs) to ensure guaranteed operation of no fail systems and applications
    • Leading Threat and Risk engagements and providing guidance including QA for SA&A deliverables.
  • The bidder must have a minimum of five (5) years (60 Months) experience developing IT security documentation (e.g., TRA, SA&A, C&A, Statements of Sensitivity, Privacy Impact Assessments) for a Defence or Security focused government of Canada federal department.
  • The bidder must demonstrate that the proposed resource has a minimum of one year (12 Months) conducting SA&A assessments in the use of the Harmonized Assessment of Cyber Risks.

If interested, please reach out to Dio at dio@mdosconsulting.com