Ottawa, ON, K1S 5E2, CAN
23 hours ago
IT Security Design Specialist – Level 3 (Microsoft CRM Dynamics 365)
NTT DATA strives to hire exceptional, innovative, and passionate individuals who want to grow with us. If you want to be part of an inclusive, adaptable, and forward-thinking organization, apply now. We are currently seeking an IT Security Design Specialist Level 3 to join our team 100% remote based in Canada. **Position Summary:** We are looking for an Information Technology Security Design Specialist with 10+ years' experience. You will work with stakeholders to analyze existing processes and safeguards and recommend changes, playing a primary role in defining standard organizational guidelines. You will work on migrating the old CRM Dynamics Solutions hosted in CRM Dynamics 2016 servers to the CRM Dynamics 365 Azure Cloud SAAS platform. One of the first projects is a complex system that needs to be migrated to CRM Dynamics 9 (On-Prem) as Phase 1 before the move to cloud CRM Dynamics 365. The project will get the Authorization to Operate (ATO) prior production deployment, therefore a full Security Assessment and Authorization (SA&A) process needs to be successfully completed and for which an IT Security Design specialist skillset is required. **Responsibilities & Tasks:** Develop and/or complete documents for the infrastructure, the associated Microsoft Power Platform and specific solutions developed on CRM Dynamics 9 (On-Prem). Review, analyze, and/or apply Federal IT Security policies, System IT Security Certification & Accreditation processes, IT Security products, safeguards and best practices, and the IT Security risk mitigation strategies. Identify threats to, and vulnerabilities of operating systems and wireless architectures (MS Power Platform / CRM Dynamics). Identify personnel, technical, physical, and procedural threats to and vulnerabilities of Federal IT systems. Develop reports such as Data security analysis, Concepts of operation, Statements of Sensitivity (SoSs), Threat assessments, Privacy Impact Assessments (PIAs), Non-technical Vulnerability Assessments, Risk assessments, IT Security threat, vulnerability and/or risk briefings. Develop Security Certification Plans, verify that security safeguards meet the applicable policies and standards. Validate the security requirements by mapping the system-specific security policy to the functional security requirements and mapping the security requirements through the various stages of design documents. Verify that security safeguards have been implemented correctly and that assurance requirements have been met. Conduct security testing and evaluation (ST&E) to determine if the technical safeguards are functioning correctly. Assess the residual risk provided by the risk assessment to determine if it meets an acceptable level of risk. Review of the certification results in the design review documentation by the Accreditation Authority to ensure that the system will operate with an acceptable level of risk and that it will be in compliance. Identify the conditions under which a system is to operate (for approval purposes). Developmental approval by both the Operational and the Accreditation Authorities to proceed to the next stage in IT system's life cycle development if sensitive information is to be handled by the system during development. Operational written approval for the implemented IT system to operate and process sensitive information if the risk of operating the system is deemed acceptable, and in compliance with security policies and standards. Develop and deliver training material relevant to the resource category. **Mandatory Qualifications:** Must have 10+ years' experience within the last fifteen years as an IT Security Design Specialist or related position. Must have 3+ years' experience within the last seven years with CRM Dynamics 365, specifically with: a. CRM Dynamics Solutions hosted in CRM Dynamics 2016 servers. b. CRM Dynamics 365 Azure Cloud SAAS Power Platform and solutions developed on CRM Dynamics 9 (On-Prem). Must currently hold a valid Secret Security Clearance. Bilingual in French/English is strongly preferred English only candidates will be considered as well. University degree or college/CEGEP Diploma related to computer science, information technology, or engineering from a recognized post-secondary institution. A copy of the degree or diploma must be provided. If applicable, a copy of Canadian equivalency must be provided as well. About NTT DATA: NTT DATA is a $30 billion trusted global innovator of business and technology services. We serve 75% of the Fortune Global 100 and are committed to helping clients innovate, optimize and transform for long term success. As a Global Top Employer, we have diverse experts in more than 50 countries and a robust partner ecosystem of established and start-up companies. Our services include business and technology consulting, data and artificial intelligence, industry solutions, as well as the development, implementation and management of applications, infrastructure and connectivity. We are one of the leading providers of digital and AI infrastructure in the world. NTT DATA is a part of NTT Group, which invests over $3.6 billion each year in R&D to help organizations and society move confidently and sustainably into the digital future. Visit us at us.nttdata.com NTT DATA endeavors to make https://us.nttdata.com accessible to any and all users. If you would like to contact us regarding the accessibility of our website or need assistance completing the application process, please contact us at https://us.nttdata.com/en/contact-us. This contact information is for accommodation requests only and cannot be used to inquire about the status of applications. NTT DATA is an equal opportunity employer. Qualified applicants will receive consideration for employment without regard to race, color, religion, sex, sexual orientation, gender identity, national origin, disability or protected veteran status. For our EEO Policy Statement, please click here. If you'd like more information on your EEO rights under the law, please click here. For Pay Transparency information, please click here.
Por favor confirme su dirección de correo electrónico: Send Email