Security Assessment and Authorization Specialist

at  CGI

Location: Ottawa- may consider other locations in Ontario, preference is in the Ottawa area
Security Clearance: Must have SECRET level security clearance OR be able obtain Secret level security clearance.
As a Security Assessment and Authorization Specialist, you will play a crucial role in safeguarding our organization’s information systems and data. You will be responsible for assessing and authorizing the security controls implemented within our systems to ensure compliance with industry regulations and best practices.

YOUR FUTURE DUTIES AND RESPONSIBILITIES

• Conduct comprehensive security assessments of information systems, identifying vulnerabilities and potential threats.
• Collaborate with cross-functional teams to implement and enhance security controls.
• Develop and maintain security authorization documentation, including Security Assessment Reports (SARs) and Authorization Packages.
• Perform risk assessments and provide recommendations for risk mitigation strategies.
• Stay abreast of industry trends, emerging threats, and best practices to continually improve the organization’s security posture.
• Participate in the development and implementation of security policies, standards, and procedures.
• Assist in responding to security incidents, conducting investigations, and implementing corrective actions.

REQUIRED QUALIFICATIONS TO BE SUCCESSFUL IN THIS ROLE

• Bachelor’s degree in Computer Science, Information Technology, or a related field.
• Security Clearance: Must have SECRET level security clearance OR be able obtain Secret level security clearance
• Minimum of 10 years of experience in security assessment and authorization roles.
• In-depth knowledge of relevant cybersecurity frameworks and standards (e.g., NIST, ISO 27001).
• Experience conducting security assessments and vulnerability assessments.
• Strong understanding of networking protocols, systems architecture, and security technologies.
• Professional certifications such as CISSP, CISM, or CISA are highly desirable.
• Excellent communication skills, with the ability to convey complex technical information to non-technical stakeholders..