Security Assessment & Authorization Specialist (SA&A) Lead - RR#001

Who We Are

PLATO is Canada’s largest Indigenous-owned software testing and technology services company. For nearly 30 years, our expert teams have helped our clients deliver reliable products that users enjoy interacting with.

Our 100% Canada‑based team brings deep experience in QA, software testing, and IT services, along with a shared commitment to collaboration, mentorship, and continuous improvement. We’re a team that shows up for each other, whether that’s tackling complex client challenges or helping colleagues grow through coaching and knowledge‑sharing.

As Canada’s largest Indigenous‑owned software testing company, we’re proud of our roots and our mission to build a stronger, more inclusive technology workforce. At the same time, we warmly welcome applicants of all backgrounds and experiences who are passionate about quality, teamwork, and making an impact.

Security Assessment and Authorization (SA&A) Specialist

Location: Remote, Canada

Duration-(Oct 6 to June 30-2027)

Security Clearance: Active Government of Canada Secret Clearance is required at the time of application

Summary

We are seeking an experienced Security Assessment & Authorization (SA&A) Lead to lead security authorization activities for cloud-based applications and platforms within Microsoft Azure environments. The successful candidate will be responsible for planning and executing SA&A activities, conducting security and compliance assessments, translating security controls into functional and non-functional requirements, and developing security testing strategies to support authorization decisions.

This role will work closely with business stakeholders, solution architects, security teams, privacy specialists, and project delivery teams to assess security controls, collect evidence, identify risks, and ensure solutions meet security, privacy, and operational requirements. The role also provides security guidance for Azure-based solutions and Microsoft platforms such as Dynamics 365, Fabric, Purview, and Azure Data Factory.

Responsibilities

• Lead the planning, execution, and governance of Security Assessment and Authorization (SA&A) activities for applications and solutions deployed within Microsoft Azure environments.

• Facilitate the preparation, review, and maintenance of security authorization documentation, including Control Activity Evidence, Security Test Reports, and Security Assessment and Authorization packages.

• Collaborate with business stakeholders, solution architects, security teams, privacy specialists, and project delivery teams to assess security controls, document findings, collect supporting evidence, and support authorization activities.

• Conduct security and compliance assessments to identify risks, evaluate security control effectiveness, and support authorization decisions.

• Extract functional requirements (FRs) and non-functional requirements (NFRs) from security controls and translate them into actionable security requirements for solution delivery teams.

• Design and execute security test plans that validate security controls and demonstrate compliance with security and operational requirements.

• Provide security guidance and assessment support for Azure-based solutions and Microsoft platforms, including Dynamics 365, Microsoft Fabric, Microsoft Purview, and Azure Data Factory.

• Support risk identification, remediation planning, and ongoing compliance activities throughout the solution lifecycle.

• Ensure security, privacy, and operational requirements are incorporated into solution design, implementation, and authorization processes.

Requirements

• 10+ years of experience performing security functional testing and control mapping, including validating security controls and demonstrating compliance with security requirements.

• Experience with the Canadian Government Security Assessment and Authorization (SA&A) process, including supporting security authorization activities, documentation, assessments, and evidence collection.

• Knowledge of Azure services and components security, including assessing and validating security controls across Azure-based applications and platforms.

• Experience with Microsoft Dynamics 365, Microsoft Fabric, Microsoft Purview, and Azure Data Factory (ADF) in support of security assessments, compliance activities, and authorization processes.

• Knowledge of security processes and operational requirements, including security governance, control assessment, testing, risk management, and operational security practices.

Work With Us

At PLATO, we believe that great work happens when people feel supported, connected, and challenged in the right ways. You’ll be part of a collaborative environment where experienced professionals share knowledge, mentor others, and contribute to solving complex, real‑world client projects.

We are committed to inclusive hiring practices and encourage applications from individuals of all backgrounds, including women, persons with disabilities, visible minorities, and Indigenous peoples. If you require accommodation at any stage of the recruitment process, we’re here to support you.

PLATO respectfully acknowledges that we operate on treaty territories, unceded First Nations and Inuit territories, and within Métis homelands. We honour the long history of these lands and actively work toward reconciliation between Indigenous and non‑Indigenous peoples on Turtle Island.