Posted 6 days ago
IT Security Threat & Risk Assessment and C&A Analyst
@ OXARO Inc.
Ottawa, Ontario
SIGNALS
Overview
OXARO Inc. is hiring a contract IT Security Threat & Risk Assessment and C&A Analyst in Ottawa, on site, for 10 months. The work covers threat, vulnerability and risk assessments for complex IM/IT systems, digital sovereignty and Zero Trust considerations, and certification and accreditation. Secret clearance and Controlled Goods status are required, along with 10+ years of experience and CISSP, CRISC or GCIH certification.
Responsibilities:
- Conduct threat, vulnerability and risk assessments (TRA, HTRA)
- Produce risk ratings, risk registers and mitigation strategies
- Assess security controls against ITSG-33, NIST or equivalent
- Evaluate digital sovereignty and data residency risks
- Support certification and accreditation of complex IM/IT systems
Requirements summary:
- 10+ years of IT security TRA services in protected environments
- Experience with TRA, HTRA, threat and vulnerability assessments
- Experience with ITSG-33, NIST or equivalent frameworks
- CISSP, CRISC or GCIH certification required
- Secret clearance and Controlled Goods required
Source and dates
Source type not verified · apify-linkedin
- Employer posting date
- 2026-11-08
- First seen by our source
- 2026-11-14
- Source record updated
- 2026-11-14
These dates describe the source record, not a live verification that the employer is still hiring. Check the original posting.
Job details
| Seniority | Senior |
| Department | IT |
| Experience | 10+ years |
| Work setting | Office, Client sites |
| Position | Mostly sitting |
| Physical demands | physical low · computer high |
| Languages | English |
| Licences & certifications | CISSP, CRISC, GCIH |
| Encouraged to apply | Women |
| Security clearance | Secret |
Summary and details written by AI from the posting; the employer’s posting is the authority.
OXARO Inc.
| Field | Value |
|---|---|
| Open jobs on Jobsy | 8 |
Job description
Location: Ottawa, ON (On-site)
Duration: 10 months
Security Clearance: Secret & Controlled Goods required
Responsibilities
AI Disclosure: We do not use artificial intelligence (AI) tools to screen, assess, or select applicants at any stage of our recruitment process. All applications are reviewed by our recruitment team.
OXARO is committed to fostering an inclusive, equitable and respectful workplace where every individual feels valued and empowered to contribute their best. We believe that diversity drives innovation and strengthens our ability to serve our clients and communities. We are dedicated to ensuring a fair and unbiased recruitment process and welcome applications from members of the four designated groups under the Employment Equity Act: women, Indigenous peoples, persons with disabilities and members of visible minorities.
Accommodations are available upon request for candidates taking part in all aspects of the recruitment process.
We sincerely thank all applicants for their interest in this opportunity. While we appreciate every application, only those selected for an interview will be contacted.
Duration: 10 months
Security Clearance: Secret & Controlled Goods required
Responsibilities
- Conduct Threat Assessments (TA), Vulnerability Assessments (VA), Threat and Risk Assessments (TRA), and Harmonized Threat and Risk Assessments (HTRA).
- Identify, analyze, and document threats, vulnerabilities, risks, and potential impacts to information, systems, and operations.
- Produce risk ratings, risk registers, mitigation strategies, and residual risk assessments.
- Assess architectural risks, information protection requirements, and security requirements for enterprise modernization initiatives.
- Evaluate digital sovereignty considerations, data residency risks, and jurisdictional exposure.
- Assess the effectiveness of security controls and identify vulnerabilities, deficiencies, and recommendations in accordance with ITSG-33, NIST, or equivalent frameworks.
- Develop security recommendations, risk-based decision support products, and executive risk briefings.
- Contribute to strategic security assessments and security architecture assessments for enterprise information systems.
- Assess identity and access management risks, Zero Trust implementation considerations, and enterprise security requirements.
- Support certification and accreditation activities for complex IM/IT systems.
- Maintain a digital sovereignty risk register and supporting risk documentation.
- Provide advisory reports and recommendations supporting future-state architecture development.
- 10+ years of experience providing IT security threat and risk assessment services in protected environments supporting complex IM/IT systems, modernization initiatives, or enterprise transformation programs.
- Experience conducting Threat Assessments, Vulnerability Assessments, Threat and Risk Assessments, and Harmonized Threat and Risk Assessments.
- Experience identifying, analyzing, and documenting threats, vulnerabilities, risks, and potential impacts.
- Experience producing risk ratings, risk registers, mitigation strategies, and residual risk assessments.
- Experience assessing security controls and identifying vulnerabilities in accordance with ITSG-33, NIST, or equivalent security frameworks.
- Experience developing security recommendations, risk-based decision support products, and executive risk briefings.
- Experience assessing digital sovereignty, data residency risks, and enterprise security requirements.
- One of the following certifications required: CISSP, CRISC, or GCIH (multiple certifications preferred).
AI Disclosure: We do not use artificial intelligence (AI) tools to screen, assess, or select applicants at any stage of our recruitment process. All applications are reviewed by our recruitment team.
OXARO is committed to fostering an inclusive, equitable and respectful workplace where every individual feels valued and empowered to contribute their best. We believe that diversity drives innovation and strengthens our ability to serve our clients and communities. We are dedicated to ensuring a fair and unbiased recruitment process and welcome applications from members of the four designated groups under the Employment Equity Act: women, Indigenous peoples, persons with disabilities and members of visible minorities.
Accommodations are available upon request for candidates taking part in all aspects of the recruitment process.
We sincerely thank all applicants for their interest in this opportunity. While we appreciate every application, only those selected for an interview will be contacted.
Journal
Only you can see this. Kept on this device, and in your account when you sign in.