IT Security Planning & Protection Consultant
- Ottawa, ON, Canada
Contract
Applications open in a new tab.
Job details
- Job type
- Contract
- Apply by
- Posting language
- English
- Posted
Original job description
Location: Ottawa, ON (On-site)
Duration: 10 months
Security Clearance: Secret & Controlled Goods required
Responsibilities
AI Disclosure: We do not use artificial intelligence (AI) tools to screen, assess, or select applicants at any stage of our recruitment process. All applications are reviewed by our recruitment team.
OXARO is committed to fostering an inclusive, equitable and respectful workplace where every individual feels valued and empowered to contribute their best. We believe that diversity drives innovation and strengthens our ability to serve our clients and communities. We are dedicated to ensuring a fair and unbiased recruitment process and welcome applications from members of the four designated groups under the Employment Equity Act: women, Indigenous peoples, persons with disabilities and members of visible minorities.
Accommodations are available upon request for candidates taking part in all aspects of the recruitment process.
We sincerely thank all applicants for their interest in this opportunity. While we appreciate every application, only those selected for an interview will be contacted.
Duration: 10 months
Security Clearance: Secret & Controlled Goods required
Responsibilities
- Define future-state security architecture principles, standards, and design artefacts to guide enterprise modernization initiatives.
- Develop strategic security advice, executive briefings, and security roadmaps for senior decision makers.
- Assess current-state architecture and develop future-state enterprise security architecture recommendations.
- Establish security requirements baselines, traceability mechanisms, and security principles catalogues.
- Evaluate Identity and Access Management, Zero Trust principles, and information protection approaches supporting secure access to information and services.
- Analyze security considerations across cloud-hosted, SaaS, hybrid, and on-premises deployment models.
- Assess digital sovereignty, data residency, jurisdictional risks, and sovereign control requirements.
- Develop a uniquely numbered catalogue of security requirements, design constraints, and security controls.
- Define control objectives, information protection, access management, monitoring, and compartmentation requirements.
- Produce a requirements traceability matrix linking observations, findings, risks, and recommendations.
- Provide architecture recommendations to inform future procurement, solution evaluation, and implementation planning.
- Prioritize requirements based on business impact, risk, and implementation urgency, and support governance activities.
- 10+ years of experience providing strategic IT security planning and protection services in protected environments that apply formal security classification, safeguarding, privacy, and risk management controls.
- Experience supporting complex IM/IT modernization, transformation, or enterprise security initiatives.
- Experience in security architecture planning, assessment, and development for complex IM/IT systems, including defining security principles, requirements, controls, and future-state security recommendations.
- Experience with security considerations associated with cloud-hosted, SaaS, hybrid, and on-premises environments.
- Experience with Identity and Access Management (IAM), Zero Trust principles, information protection, and enterprise security architecture.
- Experience developing strategic security advice, executive briefings, security roadmaps, and future-state security recommendations for senior decision makers.
- Experience assessing digital sovereignty, data residency, jurisdictional risks, service provider dependencies, and sovereign control requirements.
- One of the following certifications required: CISSP, CISM, or CGRC/CAP (multiple certifications preferred).
AI Disclosure: We do not use artificial intelligence (AI) tools to screen, assess, or select applicants at any stage of our recruitment process. All applications are reviewed by our recruitment team.
OXARO is committed to fostering an inclusive, equitable and respectful workplace where every individual feels valued and empowered to contribute their best. We believe that diversity drives innovation and strengthens our ability to serve our clients and communities. We are dedicated to ensuring a fair and unbiased recruitment process and welcome applications from members of the four designated groups under the Employment Equity Act: women, Indigenous peoples, persons with disabilities and members of visible minorities.
Accommodations are available upon request for candidates taking part in all aspects of the recruitment process.
We sincerely thank all applicants for their interest in this opportunity. While we appreciate every application, only those selected for an interview will be contacted.
More about this job
Responsibilities
Develop future-state enterprise security architecture, principles, requirements, controls, and roadmaps to guide modernization, procurement, and implementation. Assess security across cloud, SaaS, hybrid, and on-premises environments, including IAM, Zero Trust, information protection, digital sovereignty, and jurisdictional risks.
Requirements
Requires 10+ years of strategic IT security planning and protection experience in protected environments, including complex IM/IT modernization and enterprise security architecture. Candidates must have experience with cloud and hybrid security, IAM, Zero Trust, information protection, sovereignty and data residency assessments, and at least one of CISSP, CISM, or CGRC/CAP; Secret and Controlled Goods clearance is required.
Skills
- Security Architecture
- Strategic IT Security Planning
- Enterprise Security Architecture
- Security Requirements Development
- Security Controls
- Identity and Access Management
- Zero Trust
- Information Protection
- Cloud Security
- Digital Sovereignty
- Data Residency and Jurisdictional Risk Assessment
- Security Risk Management
- Requirements Traceability
- Security Roadmap Development
- Executive Briefings
- CISSP, CISM, or CGRC/CAP
Visa sponsorship
Not detected in the job text
Categories
- Technology
- Security & Safety
- Consulting
- Government & Public Sector
Keywords
- IT Security Planning
- Security Architecture
- Enterprise Modernization
- IM/IT Modernization
- Security Principles
- Security Requirements
- Security Controls
- Requirements Traceability Matrix
- Identity and Access Management
- Zero Trust
- Information Protection
- Cloud-Hosted Environments
- SaaS
- Hybrid Environments
- On-Premises Environments
- Digital Sovereignty
- Data Residency
- Jurisdictional Risk
- Sovereign Control
- Risk Management
- Security Roadmaps
- Executive Briefings
- Procurement
- CISSP
- CISM
- CGRC
- CAP
- Secret Security Clearance
- Controlled Goods