Jobs in Canada

25+ jobs

Email me new jobs Save this search

Added 8 mins ago
Principal Software Development Engineer
Zscaler
Burnaby, BC
…SASE-based Zero Trust Exchange is the world’s largest in-line cloud security…
Added 37 mins ago
A
Staff Software Engineer - Open Source Data Platform (ODP)
Acceldata
Kitchener, ON
- Full-time
At Acceldata, you won't just be writing code; you'll be defining the architecture and technical vision for modern data platforms used by some of the world's largest enterprises.
Added 37 mins ago
J
Database Administrator - Senior
Joblinxsapp
Toronto, ON
- Full-time
…SQL Server, cloud database platforms (Azure/AWS), database architecture, performance tuning, backup and recovery, security implementation, and enterprise database…
Added 37 mins ago
DC
Technical Specialist, Project Management
Defence Construction Canada
Saint-Jean-sur-Richelieu, QC · St-Jean-Sur-Richelieu, QC
- Full-time
Minimum: college diploma in engineering, architecture or related field with four years’ relevant experience, or the equivalent
Added 37 mins ago
IC
Oracle SQL Database Administrator
iPartner Consulting
Toronto, ON
- Contract
Strong knowledge of database security, RBAC, data masking, encryption, and vulnerability remediation.
Added 37 mins ago
OI
IT Security Planning & Protection Consultant
OXARO Inc.
Ottawa, ON
- Contract
Define future-state security architecture principles, standards, and design artefacts to guide enterprise modernization initiatives.
Added 37 mins ago
OI
IT Security Design Specialist
OXARO Inc.
Ottawa, ON
- Contract
Produce security control frameworks, security requirements baselines, and architecture assessments.
Added 37 mins ago
D
Manager, Secure Digital Builders, Cyber
Deloitte
Moncton, NB
- Full-time
7+ years of experience in cloud security, security architecture or security engineering, including experience leading teams or workstreams
Added 37 mins ago
OI
IT Security Threat & Risk Assessment and C&A Analyst
OXARO Inc.
Ottawa, ON
- Contract
Contribute to strategic security assessments and security architecture assessments for enterprise information systems.
Added 37 mins ago
D
Manager, Secure Digital Builders, Cyber
Deloitte
Halifax, NS
- Full-time
7+ years of experience in cloud security, security architecture or security engineering, including experience leading teams or workstreams
Added 37 mins ago
D
Manager, Secure Digital Builders, Cyber
Deloitte
Fredericton, NB
- Full-time
7+ years of experience in cloud security, security architecture or security engineering, including experience leading teams or workstreams
Added 37 mins ago
D
Manager, Secure Digital Builders, Cyber
Deloitte
Saint John, NB
- Full-time
7+ years of experience in cloud security, security architecture or security engineering, including experience leading teams or workstreams
Added 37 mins ago
D
Manager, Secure Digital Builders, Cyber
Deloitte
Victoria, BC
- Full-time
7+ years of experience in cloud security, security architecture or security engineering, including experience leading teams or workstreams
Added 37 mins ago
D
Manager, Secure Digital Builders, Cyber
Deloitte
Burlington, ON
- Full-time
7+ years of experience in cloud security, security architecture or security engineering, including experience leading teams or workstreams
Added 37 mins ago
D
Manager, Secure Digital Builders, Cyber
Deloitte
Kitchener, ON
- Full-time
7+ years of experience in cloud security, security architecture or security engineering, including experience leading teams or workstreams
Added 37 mins ago
D
Manager, Secure Digital Builders, Cyber
Deloitte
Ottawa, ON
- Full-time
7+ years of experience in cloud security, security architecture or security engineering, including experience leading teams or workstreams
Added 37 mins ago
D
Manager, Secure Digital Builders, Cyber
Deloitte
Regina, SK
- Full-time
7+ years of experience in cloud security, security architecture or security engineering, including experience leading teams or workstreams
Added 37 mins ago
D
Manager, Secure Digital Builders, Cyber
Deloitte
Vancouver, BC
- Full-time
7+ years of experience in cloud security, security architecture or security engineering, including experience leading teams or workstreams
Added 37 mins ago
D
Manager, Secure Digital Builders, Cyber
Deloitte
Toronto, ON
- Full-time
7+ years of experience in cloud security, security architecture or security engineering, including experience leading teams or workstreams
Added 37 mins ago
D
Manager, Secure Digital Builders, Cyber
Deloitte
Winnipeg, MB
- Full-time
7+ years of experience in cloud security, security architecture or security engineering, including experience leading teams or workstreams
Added 37 mins ago
D
Manager, Secure Digital Builders, Cyber
Deloitte
Saskatoon, SK
- Full-time
7+ years of experience in cloud security, security architecture or security engineering, including experience leading teams or workstreams
Added 37 mins ago
D
Manager, Secure Digital Builders, Cyber
Deloitte
AB · Edmonton, AB
- Full-time
7+ years of experience in cloud security, security architecture or security engineering, including experience leading teams or workstreams
Added 37 mins ago
D
Manager, Secure Digital Builders, Cyber
Deloitte
Calgary, AB
- Full-time
7+ years of experience in cloud security, security architecture or security engineering, including experience leading teams or workstreams
Added 37 mins ago
D
Manager, Secure Digital Builders, Cyber
Deloitte
St. John's, NL · Greater St. John's Metropolitan Area
- Full-time
7+ years of experience in cloud security, security architecture or security engineering, including experience leading teams or workstreams
Added 37 mins ago
L
Senior Data Engineer
Luxoft
Toronto, ON
- Full-time
- Data Architecture & Modeling: Design scalable data models, schema structures, partitioning strategies, and data quality controls to ensure reliable and efficient data consumption.

OXARO Inc.

IT Security Threat & Risk Assessment and C&A Analyst

Ottawa, ON, Canada

Contract

Apply About employer

Applications open in a new tab.

Job details

Job type: Contract
Apply by: Dec 9, 2026
Posting language: English
Posted: Nov 9, 2026

Original job description

Location: Ottawa, ON (On-site)

Duration: 10 months

Security Clearance: Secret & Controlled Goods required

Responsibilities

Conduct Threat Assessments (TA), Vulnerability Assessments (VA), Threat and Risk Assessments (TRA), and Harmonized Threat and Risk Assessments (HTRA).
Identify, analyze, and document threats, vulnerabilities, risks, and potential impacts to information, systems, and operations.
Produce risk ratings, risk registers, mitigation strategies, and residual risk assessments.
Assess architectural risks, information protection requirements, and security requirements for enterprise modernization initiatives.
Evaluate digital sovereignty considerations, data residency risks, and jurisdictional exposure.
Assess the effectiveness of security controls and identify vulnerabilities, deficiencies, and recommendations in accordance with ITSG-33, NIST, or equivalent frameworks.
Develop security recommendations, risk-based decision support products, and executive risk briefings.
Contribute to strategic security assessments and security architecture assessments for enterprise information systems.
Assess identity and access management risks, Zero Trust implementation considerations, and enterprise security requirements.
Support certification and accreditation activities for complex IM/IT systems.
Maintain a digital sovereignty risk register and supporting risk documentation.
Provide advisory reports and recommendations supporting future-state architecture development.

Qualifications

10+ years of experience providing IT security threat and risk assessment services in protected environments supporting complex IM/IT systems, modernization initiatives, or enterprise transformation programs.
Experience conducting Threat Assessments, Vulnerability Assessments, Threat and Risk Assessments, and Harmonized Threat and Risk Assessments.
Experience identifying, analyzing, and documenting threats, vulnerabilities, risks, and potential impacts.
Experience producing risk ratings, risk registers, mitigation strategies, and residual risk assessments.
Experience assessing security controls and identifying vulnerabilities in accordance with ITSG-33, NIST, or equivalent security frameworks.
Experience developing security recommendations, risk-based decision support products, and executive risk briefings.
Experience assessing digital sovereignty, data residency risks, and enterprise security requirements.
One of the following certifications required: CISSP, CRISC, or GCIH (multiple certifications preferred).

Security Clearance: Secret & Controlled Goods required

AI Disclosure: We do not use artificial intelligence (AI) tools to screen, assess, or select applicants at any stage of our recruitment process. All applications are reviewed by our recruitment team.

OXARO is committed to fostering an inclusive, equitable and respectful workplace where every individual feels valued and empowered to contribute their best. We believe that diversity drives innovation and strengthens our ability to serve our clients and communities. We are dedicated to ensuring a fair and unbiased recruitment process and welcome applications from members of the four designated groups under the Employment Equity Act: women, Indigenous peoples, persons with disabilities and members of visible minorities.

Accommodations are available upon request for candidates taking part in all aspects of the recruitment process.

We sincerely thank all applicants for their interest in this opportunity. While we appreciate every application, only those selected for an interview will be contacted.

Apply About employer

More about this job

Responsibilities

Conduct threat, vulnerability, and risk assessments for complex information systems, documenting risks, ratings, mitigation strategies, and residual risks. Assess security controls, architecture, digital sovereignty, data residency, identity and access management, and Zero Trust considerations, while supporting certification and accreditation and preparing recommendations and executive briefings.

Requirements

Requires 10+ years of IT security threat and risk assessment experience in protected environments supporting complex IM/IT systems or enterprise modernization. Candidates must have experience with relevant assessment and security frameworks, digital sovereignty and data residency risks, and hold at least one of CISSP, CRISC, or GCIH; Secret clearance and Controlled Goods eligibility are required.

Skills

Threat Assessment
Vulnerability Assessment
Threat And Risk Assessment
Harmonized Threat And Risk Assessment
Risk Analysis
Risk Register Management
Risk Mitigation
Security Control Assessment
ITSG-33
NIST
Digital Sovereignty Assessment
Data Residency Risk Assessment
Security Architecture Assessment
Identity And Access Management
Zero Trust
Certification And Accreditation

Visa sponsorship

Not detected in the job text

Keywords

Threat Assessment
Vulnerability Assessment
Threat And Risk Assessment
Harmonized Threat And Risk Assessment
IT Security
IM/IT Systems
ITSG-33
NIST
CISSP
CRISC
GCIH
Digital Sovereignty
Data Residency
Risk Register
Risk Ratings
Risk Mitigation
Residual Risk Assessment
Security Controls
Security Architecture
Identity And Access Management
Zero Trust
Certification And Accreditation
Enterprise Modernization
Executive Risk Briefings
Secret Security Clearance
Controlled Goods

Report this job