Intermediate Cybersecurity Inspector

ADGA Group Consultants Inc•Ottawa, ON

5d•CA$80,000 - CA$90,000

About The Position

The Cybersecurity Inspector performs objective, repeatable, evidence-based inspections to verify the existence, implementation, and operational status of security controls required under ITSP.10.171 – Government of Canada Security Controls for Protecting Specified Information in non-Government of Canada systems and organizations. The role emphasizes direct observation and verification of controls with minimal interpretive judgement, supporting certification, compliance, and remediation activities. The Cybersecurity Inspector supports the Cybersecurity Assessor in the collection of evidence relevant to the incoming CPCSC certification.

Requirements

Professional certification or formal training in cybersecurity, security management, or computer networking
2+ years of experience in cybersecurity, network security, or IT operations
Working knowledge of: ITSP.10.171, NIST Cybersecurity Framework (CSF), NIST Risk Management Framework (SP 800-37), NIST SP 800-53 / ITSG-33 (Medium baseline), NIST SP 800-171 (rev 2 (CMMC) and rev 3 (CPCSC))
Experience conducting technical inspections, gap analyses, or audit evidence collection
Strong attention to detail and documentation skills

Nice To Haves

CISSP (strongly preferred)
CCSP
ISO 2700x or ISO 9001 Internal Auditor certification
Regulatory training as required (e.g., PSPC CPCSC Secretariat, Cyber AB)
Experience supporting or participating in regulatory or compliance audits
Experience drafting inspection or compliance reports for senior leadership
Experience developing or validating training materials in regulated or adult learning environments

Responsibilities

Plan and prepare inspections by reviewing scope, applicable controls, and inspection procedures in compliance with ADGA and accreditation body requirements (as applicable).
Conduct physical, procedural, and technical inspections through direct observation and repeatable testing guided by ITSP.10.171A
Verify control presence, configuration, and operational status against ITSP.10.171 requirements and guided by ITSP.10.171A
Collect and preserve objective evidence (e.g., screenshots, configuration outputs, logs, interview notes)
Document findings in clear, condition-based language and maintain chain-of-evidence integrity
Identify, classify, and report non-conformities and deficiencies
Produce inspection reports summarizing observed conditions and compliance status
Perform follow-up inspections to verify corrective actions
Contribute to continuous improvement of inspection tools, checklists, and processes