Job Description:
The Business Consultant IT Security will act as a trusted security consultant, providing expert advisory and hands-on support across Security Assessment & Authorization (SA&A) initiatives. The role focuses on guiding project teams through complex security compliance requirements, shaping security architecture decisions, and ensuring successful attainment of Authority to Operate (ATO). This position requires strong stakeholder engagement, risk-based decision-making, and the ability to translate security frameworks into practical implementation within enterprise and COTS-based environments.
Day to Day Job Duties:
Conduct technical research and provide expert guidance on Security Assessment & Authorization (SA&A) requirements.
Collaborate with project teams and Life Cycle Application Manager (LCAM) through weekly meetings to track SA&A progress.
Support security evidence collection and develop formal risk and compliance documentation.
Develop and refine SA&A artefacts including CONOPS, SCAR, PoAM, data dictionaries, and security control questionnaires.
Advise project teams on implementation and prioritization of tailored security controls.
Define and validate security processes across SDLC, including:
Vulnerability Management
Identity and Access Management (IAM)
Audit and Logging
Incident Response
Data Loss Prevention (DLP)
Review system architecture for compliance with Enterprise Architecture (EA) and CIA (Confidentiality, Integrity, Availability) requirements.
Assess documentation, questionnaires, and evidence ahead of IATO and ATO approvals.
Identify gaps or deficiencies in implemented security controls and recommend remediation actions.
Prepare and package documentation for IATO/ATO submissions.
Participate in SA&A governance meetings, sprint ceremonies, and cross-functional discussions.
Basic Qualifications:
6+ years of experience in Security Assessment & Authorization (SA&A) within government, para-government, or regulated environments.
6+ years of hands-on experience developing:
Security Categorization Reports (SCAR)
Security Requirements Traceability Matrices (SRTM)
Security Concept of Operations (CONOPS)
Security Assessment Reports (SAR)
Threat and Risk Assessments (TRA)
Strong knowledge of security frameworks, compliance standards, and risk management methodologies.
Experience reviewing enterprise and COTS-based system architectures for security compliance.
Proven ability to support ATO/IATO processes and security audits.
Strong stakeholder management and consulting skills.
Bilingual in English and French.
Travel:
Minimal travel required: Must be able to work in a hybrid model (2 days per week onsite in Nepean, Ottawa).
Degree:
Certificate, Diploma, or Degree in Computer Science, Information Security, or a related field from a recognized post-secondary institution.
Nice to Have:
Additional security certifications beyond CISSP and CISA.
Experience with Canadian government security standards and frameworks.
Exposure to Defence or public sector learning systems (e.g., LMS platforms).
Familiarity with DevOps and secure SDLC practices in agile environments.
IT Security Analyst • Ottawa, ON, Canada
A Canadian defence and security technology firm is seeking a Senior IT Security Threat & Risk Assessment (TRA) Analyst in Ottawa.Responsibilities include reviewing IT Security policies, conducting ... Show more
Fixed-Term Contract (6-months).Searidge Technologies is a global leader in the Air Traffic Control space, boldly forging new paths bringing innovative technology, such as Artificial Intelligence (A... Show more
A career in IBM Consulting is built on long-term client relationships and close collaboration worldwide.You’ll work with leading companies across industries, helping them shape their hybrid cloud a... Show more
The IT Security Risk Analyst supports the Information Security Risk Management and Governance programs.They work with technology and business stakeholders to identify Information Security risks, co... Show more
Follow us on****Posting Reason:**New Position**Job Type:**Employee**Anticipated Duration in Months** (for contracts and temporary assignments):12**Job Family:**IT Security**# of Open Positions:**1*... Show more
A leading security firm is seeking a Security Analyst to enhance its security posture through proactive vulnerability management.This fully remote role requires strong analytical skills, hands-on e... Show more
IT Security Threat & Risk Assessment (TRA) Analyst.Senior role on the Strategic Radio Capability project (Option Analysis and Definition phases) supporting radio frequency communications systems.AD... Show more
Become a Senior Analyst in IT Security at uOttawa, driving identity management and risk mitigation strategies in a collaborative environment.Join us as we optimize technology for a superior educati... Show more
IT Security Engineer for a contract opportunity through one of our Government of Canada Supply Arrangements.Our Government of Canada client is looking for a qualified resource with Strategic IT Sec... Show more
Join as a Security Analyst in a cutting-edge SOC, focusing on threat hunting and detection across cloud and enterprise environments.This role will elevate your cybersecurity career while making a m... Show more
Assess threats as an IT Security Threat Risk Assessment Analyst for a defense client.Focus on strategic support and operational enhancements in a classified setting.In this key role, you will contr... Show more
A leading IT security firm in Richmond Hill is looking for an IT Security Risk Analyst to support their Information Security Risk Management programs.The role requires expertise in risk assessments... Show more
Join Thales in Ottawa as a Security Analyst and tackle complex security issues for enterprise clients.Your role is pivotal in defending against automated web attacks.We seek a dynamic Security Anal... Show more
Take charge of enterprise infrastructure operations as an Infrastructure Operations and Security Analyst.Combine expertise in virtualization and backup to enhance system performance in a hybrid set... Show more
Position: IT Security Threat Risk Assessment Analyst.Engagement Model: Incorporated Contractor (INC) Only.Akkodis is looking for an experienced, Top Secret cleared IT Security TRA Analyst to suppor... Show more
The Cybersecurity Analyst supports the risk mitigation efforts of our clients' Cyber Defense Operations (CDO) under the Information Security and Technology Risk group in order to safeguard and prot... Show more
At Farm Boy, it is our mission to create a fun, fresh experience for all! Whether you are a team member or a customer, Farm Boy is passionate about creating a unique fresh food shopping experience ... Show more
We are looking for a Security TRA & CA&A Analyst – Level 3 for our client who meets the following criteria:.Top Secret SIGINT and Nato Secret.On-site, DND NDHQ Carling 60 Moodie Drive, Ottawa.The c... Show more
A leading security consultancy in Ontario seeks an Information & Application Security Manager to lead their cybersecurity strategy and oversee IT, applications, and infrastructure security.This han... Show more
A leading IT services firm is seeking an Information Control Testing Specialist to manage information risk and ensure compliance with security policies.You will work on global initiatives, conduct ... Show more
