Execute walkthroughs and sampling of security controls to validate operating effectiveness, providing security control assessment and validation separate from the engineering build team.

Maintain an audit-ready evidence repository and lead the response to external government assessments.

Sustain authorization posture through continuous monitoring, annual assessments, and change management processes aligned with government requirements.

Manage remediation plans and track the resolution of control deficiencies.

Perform Control Operating Effectiveness testing aligned with IT Audit methodologies (e.g., ISO 27001, SOC 2) applied to Government of Canada frameworks.

Bachelor's degree in Information Systems, Accounting, Business, or equivalent practical experience.

8 years of experience in IT Audit, Compliance, or Risk Management.

Experience performing Security Control Assessment and Control Operating Effectiveness testing.

Ability to obtain a Top Secret security clearance.