About the job
As a Senior Cybersecurity Assessor, you will play a pivotal role in performing independent, evidence-based evaluations of information systems in alignment with ITSP.10.171 and various cybersecurity frameworks. Your expertise will support certification, accreditation, and ongoing compliance efforts. This position involves assessing technical, procedural, and architectural security controls, pinpointing potential risks and gaps, and generating detailed assessment reports to facilitate informed decision-making in environments aligned with the Government of Canada. You will lead a team, supported by a Cybersecurity Inspector, to gather necessary evidence for assessments.
- Plan and define the scope of cybersecurity assessments, including system boundaries, control measures, timelines, and evidence requirements, ensuring adherence to ADGA standards and accreditation body guidelines.
- Interpret and apply ITSP.10.171 and related standards to the architecture and operations of systems.
- Collect and validate evidence through comprehensive documentation reviews, interviews, and technical validation activities.
- Evaluate the effectiveness of controls, identify deficiencies and non-conformities, and assess the implications for security and business operations.
- Prepare thorough certification and assessment reports outlining clear findings, evidence, and recommendations for remediation.
- Effectively communicate assessment results to both technical teams and senior management.
- Conduct follow-up assessments to verify the effectiveness of remediation efforts.
