Security Assessment and Authorization Specialist, Lead

This is a fully remote position, open to applicants in Canada.

📋 Description

• Oversee the planning, execution, and governance of Security Assessment and Authorization (SA&A) initiatives for applications and solutions operating within Microsoft Azure environments.

• Assist in the preparation, review, and upkeep of security authorization documentation, which includes Control Activity Evidence, Security Test Reports, and SA&A packages.

• Work alongside business stakeholders, solution architects, security teams, privacy experts, and project delivery teams to evaluate security controls, document findings, gather supporting evidence, and facilitate authorization activities.

• Perform security and compliance evaluations to pinpoint risks, assess the effectiveness of security controls, and aid in authorization decisions.

• Derive functional and non-functional requirements from security controls and convert them into actionable security requirements for solution delivery teams.

• Develop and implement security test plans that validate security controls and demonstrate compliance with security and operational standards.

• Provide security guidance and assessment assistance for Azure-based solutions and Microsoft platforms, including Dynamics 365, Microsoft Fabric, Microsoft Purview, and Azure Data Factory.

• Aid in risk identification, remediation planning, and ongoing compliance activities throughout the solution lifecycle.

• Ensure that security, privacy, and operational requirements are integrated into solution design, implementation, and authorization processes.

⛳️ Requirements

• Over 10 years of experience in executing security functional testing and control mapping.

• Familiarity with the Canadian Government Security Assessment and Authorization (SA&A) process.

• Experience in supporting security authorization activities, documentation, assessments, and evidence gathering.

• Knowledge of Azure services and their security components.

• Experience with Microsoft Dynamics 365, Microsoft Fabric, Microsoft Purview, and Azure Data Factory (ADF).

• Understanding of security governance, control assessment, testing, risk management, and operational security practices.

• Active Government of Canada Secret Clearance is required at the time of application.

🏝️ Benefits

• Collaborative environment.

• Mentorship and knowledge-sharing opportunities.

• Inclusive hiring practices.

• Accommodation support available at any stage of the recruitment process.