SA&A Consultant (2+ years) to undertake security assessment and authorization activities using

Our public sector client is seeking a SA&A Consultant (2+ years) to undertake security assessment and authorization activities using ITSG-33 security controls

There is an IT Security Compliance requirement to have a local security assessment to be done in order to permit a commercial software (SaaS) to sit in the cloud. Additionally, there is also a requirement to contribute to additional SA&A assessment for other aspects of the project.

Responsibilities

• Conduct and/or manage IT Security Authorization and Accreditation (SA&A) assessments that include, but are not limited to, the following: security impact assessments, threat risk assessments, vulnerabilities assessments, privacy impact assessments, business impact assessments, and compliance testing of security requirements (Security Requirements Traceability Matrix)
• Review, analyze, create, and/or update relevant SA&A documentation, such as: Concept of Operations, IT Security Architecture, Statement of Sensitivity, and Statement of Acceptable Risk
• Analyze, review, and make recommendations vis-a-vis the IT Security posture of a system
• Develop and test system Disaster Recovery Plans
• Assess compliance with applicable security policies and standards

Must Haves:

• SA&A - 2+ years
• Secret Clearance