SA&A Practitioner (Secret clearance required)
5.5 month remote contract with high chance of extension
Security Assessment & Authorization (SA&A) Practitioner
Key Responsibilities:
- Execute Security Assessment & Authorization (SA&A) activities for Government of Canada IT projects.
- Action and provide evidence in response to security documentation, including Security Assessment Reports (SAR), Security Plans, and Risk Management Framework (RMF) artifacts.
- Ensure compliance with Government of Canada security standards, policies, and ITSG/ITSP guidelines.
- Conduct security readiness assessments and guide projects through the process to achieve Authority to Operate (ATO).
- Collaborate with project teams, system owners, and security stakeholders to identify and mitigate risks.
- Provide expert advice on security controls, threat modeling, and vulnerability management.
- Support project delivery by aligning security documentation with frameworks and government procurement requirements.
- Lead evidence collection workshops with technical solution SMEs and author required security design documents.
- Extensive experience in SA&A processes and achieving ATO for Government of Canada systems.
- Strong knowledge of ITSG-33, GC security policies, and compliance requirements.
- Familiarity with cloud and on-premise environments, including security control implementation.
- Proven ability to deliver security documentation for large-scale IT projects.
- Excellent communication and stakeholder engagement skills.
Accommodations are available on request for candidates taking part in all aspects of the selection process. For a confidential inquiry, simply email your recruiter directly or accessibility@fxinnovation.com to make arrangements.
If you have questions regarding accessible employment at Ateko please email our Human Resources team at accessibility@fxinnovation.com