The Cybersecurity Inspector performs objective, repeatable, evidence-based inspections to verify the existence, implementation, and operational status of security controls required under ITSP.10.171 – Government of Canada Security Controls for Protecting Specified Information in non-Government of Canada systems and organizations. The role emphasizes direct observation and verification of controls with minimal interpretive judgement, supporting certification, compliance, and remediation activities. The Cybersecurity Inspector supports the Cybersecurity Assessor in the collection of evidence relevant to the incoming CPCSC certification

• Plan and prepare inspections by reviewing scope, applicable controls, and inspection procedures in compliance with ADGA and accreditation body requirements (as applicable).
• Conduct physical, procedural, and technical inspections through direct observation and repeatable testing guided by ITSP.10.171A
• Verify control presence, configuration, and operational status against ITSP.10.171 requirements and guided by ITSP.10.171A
• Collect and preserve objective evidence (e.g., screenshots, configuration outputs, logs, interview notes)
• Document findings in clear, condition-based language and maintain chain-of-evidence integrity
• Identify, classify, and report non-conformities and deficiencies
• Produce inspection reports summarizing observed conditions and compliance status
• Perform follow-up inspections to verify corrective actions
• Contribute to continuous improvement of inspection tools, checklists, and processes

Hybrid Details: Remote but may include occasional travel within Canada

• Professional certification or formal training in cybersecurity, security management, or computer networking
• 2+ years of experience in cybersecurity, network security, or IT operations
• Working knowledge of:
  • ITSP.10.171
  • NIST Cybersecurity Framework (CSF)
  • NIST Risk Management Framework (SP 800-37)
  • NIST SP 800-53 / ITSG-33 (Medium baseline)
  • NIST SP 800-171 (rev 2 (CMMC) and rev 3 (CPCSC))
• Experience conducting technical inspections, gap analyses, or audit evidence collection
• Strong attention to detail and documentation skills

Certifications (Preferred)

• CISSP (strongly preferred)
• CCSP
• ISO 2700x or ISO 9001 Internal Auditor certification
• Regulatory training as required (e.g., PSPC CPCSC Secretariat, Cyber AB)

Assets

• Experience supporting or participating in regulatory or compliance audits
• Experience drafting inspection or compliance reports for senior leadership
• Experience developing or validating training materials in regulated or adult learning environments