Security Assessment & Authorization Specialist – Lead

This is a fully remote position, open to applicants in Canada.

📋 Description

• Oversee the planning, implementation, and governance of Security Assessment and Authorization (SA&A) activities for applications and solutions within Microsoft Azure environments.

• Assist in the preparation, review, and upkeep of security authorization documentation, which includes Control Activity Evidence, Security Test Reports, and SA&A packages.

• Work in partnership with business stakeholders, solution architects, security teams, privacy specialists, and project delivery teams to evaluate controls, document findings, gather evidence, and facilitate authorization activities.

• Perform security and compliance assessments to pinpoint risks, assess control effectiveness, and support authorization decisions.

• Derive functional and non-functional requirements from security controls and convert them into actionable security requirements.

• Create and implement security test plans to validate controls and demonstrate compliance.

• Offer security guidance and assessment support for Azure-based solutions, Dynamics 365, Microsoft Fabric, Microsoft Purview, and Azure Data Factory.

• Aid in risk identification, remediation planning, and ongoing compliance activities throughout the solution lifecycle.

• Ensure that security, privacy, and operational requirements are integrated into solution design, implementation, and authorization processes.

⛳️ Requirements

• Over 10 years of experience in conducting security functional testing and control mapping.

• Familiarity with the Canadian Government Security Assessment and Authorization (SA&A) process.

• Experience in supporting security authorization activities, documentation, assessments, and evidence collection.

• Understanding of Azure services and component security.

• Proficient in Microsoft Dynamics 365, Microsoft Fabric, Microsoft Purview, and Azure Data Factory (ADF).

• Knowledge of security governance, control assessment, testing, risk management, and operational security practices.

• An active Government of Canada Secret Clearance is required at the time of application.

🏝️ Benefits

• Collaborative environment.

• Opportunities for mentorship, coaching, and knowledge-sharing.

• Commitment to inclusive hiring practices.

• Support for accommodation during the recruitment process.