The Cybersecurity Assessor conducts independent, evidence-based assessments of information systems against ITSP.10.171 and related cybersecurity frameworks to support certification, accreditation, and ongoing compliance. The role evaluates technical, procedural, and architectural security controls, identifies risks and gaps, and produces formal assessment reports to support risk-based decision-making in Government of Canada–aligned environments. The Cybersecurity Assessor acts as the team lead and is supported by the Cybersecurity Inspector who assists in the collection of evidence.

• Plan and scope cybersecurity assessments, including system boundaries, controls, timelines, and evidence requirements, adhering with ADGA and the accreditation body requirements.
• Interpret and apply ITSP.10.171 and related standards to system architectures and operations
• Collect and verify evidence through documentation review, interviews, and technical validation activities
• Evaluate control effectiveness, identify deficiencies and non-conformities, and assess security and business impacts
• Prepare certification and assessment reports with clear findings, evidence, and remediation recommendations
• Communicate results to technical teams and senior management
• Conduct follow-up assessments to validate remediation efforts

• College or university diploma in cybersecurity, security management, computer networking, or a related field
• Minimum 5 years of experience in cybersecurity, network security, or IT risk management
• Experience working with:
  • ITSP.10.171
  • NIST CSF and NIST RMF (SP 800-37)
  • NIST SP 800-53 / ITSG-33
  • NIST SP 800-171 (rev 2 (CMMC) and rev 3 (CPCSC))
• Proven experience conducting technical or compliance-based cybersecurity audits
• Strong analytical, documentation, and stakeholder communication skills

Certifications (Preferred)

• CISSP (strongly preferred)
• CCSP
• Lead or Senior Auditor certification
• ISO 2700x or ISO 9001 Internal Auditor certification