RR#001 Security Assessment & Authorization Specialist (SA&A) Lead
About The Position
We are seeking an experienced Security Assessment & Authorization (SA&A) Lead to lead security authorization activities for cloud-based applications and platforms within Microsoft Azure environments. The successful candidate will be responsible for planning and executing SA&A activities, conducting security and compliance assessments, translating security controls into functional and non-functional requirements, and developing security testing strategies to support authorization decisions. This role will work closely with business stakeholders, solution architects, security teams, privacy specialists, and project delivery teams to assess security controls, collect evidence, identify risks, and ensure solutions meet security, privacy, and operational requirements. The role also provides security guidance for Azure-based solutions and Microsoft platforms such as Dynamics 365, Fabric, Purview, and Azure Data Factory.
Requirements
- 10+ years of experience performing security functional testing and control mapping, including validating security controls and demonstrating compliance with security requirements.
- Experience with the Canadian Government Security Assessment and Authorization (SA&A) process, including supporting security authorization activities, documentation, assessments, and evidence collection.
- Knowledge of Azure services and components security, including assessing and validating security controls across Azure-based applications and platforms.
- Experience with Microsoft Dynamics 365, Microsoft Fabric, Microsoft Purview, and Azure Data Factory (ADF) in support of security assessments, compliance activities, and authorization processes.
- Knowledge of security processes and operational requirements, including security governance, control assessment, testing, risk management, and operational security practices.
- Active Government of Canada Secret Clearance is required at the time of application.
Responsibilities
- Lead the planning, execution, and governance of Security Assessment and Authorization (SA&A) activities for applications and solutions deployed within Microsoft Azure environments.
- Facilitate the preparation, review, and maintenance of security authorization documentation, including Control Activity Evidence, Security Test Reports, and Security Assessment and Authorization packages.
- Collaborate with business stakeholders, solution architects, security teams, privacy specialists, and project delivery teams to assess security controls, document findings, collect supporting evidence, and support authorization activities.
- Conduct security and compliance assessments to identify risks, evaluate security control effectiveness, and support authorization decisions.
- Extract functional requirements (FRs) and non-functional requirements (NFRs) from security controls and translate them into actionable security requirements for solution delivery teams.
- Design and execute security test plans that validate security controls and demonstrate compliance with security and operational requirements.
- Provide security guidance and assessment support for Azure-based solutions and Microsoft platforms, including Dynamics 365, Microsoft Fabric, Microsoft Purview, and Azure Data Factory.
- Support risk identification, remediation planning, and ongoing compliance activities throughout the solution lifecycle.
- Ensure security, privacy, and operational requirements are incorporated into solution design, implementation, and authorization processes.
Stand Out From the Crowd
Upload your resume and get instant feedback on how well it matches this job.
What This Job Offers
Career Level
Senior
Education Level
No Education Listed
