About the job
The Intermediate Cybersecurity Inspector is tasked with conducting systematic, evidence-based evaluations to confirm the implementation and operational effectiveness of security controls mandated by ITSP.10.171 – Government of Canada Security Controls for Protecting Specified Information in non-Government of Canada environments. This role prioritizes direct observation and verification of security measures with minimal subjective interpretation, facilitating certification, compliance, and remediation efforts. The Inspector assists the Cybersecurity Assessor in gathering crucial evidence for the upcoming CPCSC certification.
- Plan and prepare for inspections by thoroughly reviewing the scope, applicable security controls, and inspection protocols in accordance with ADGA and relevant accreditation standards.
- Execute physical, procedural, and technical inspections through direct observation and repeatable testing as outlined by ITSP.10.171A.
- Assess the presence, configuration, and operational status of controls in relation to ITSP.10.171 requirements, guided by ITSP.10.171A.
- Collect and safeguard objective evidence, including screenshots, configuration outputs, logs, and interview notes.
- Document findings in a clear, condition-based manner while ensuring the integrity of the chain of evidence.
- Identify, classify, and report any non-conformities and deficiencies.
- Generate inspection reports that summarize observed conditions and compliance status.
- Conduct follow-up inspections to validate corrective actions.
- Contribute to ongoing enhancements of inspection tools, checklists, and processes.
