Cloud Security & Certification Management

The contract titled Cloud Security & Certification Management focuses on the comprehensive oversight and management of third-party security certifications including ISO 27001, ISO 27017, and SOC 2 Type II, ensuring ongoing compliance and alignment with international security standards. It also involves the control and monitoring of sub-processors handling sensitive data, requiring rigorous assessment, documentation, and continual validation of their security posture to meet regulatory and organizational requirements. The role demands close collaboration with the Company Security Officer to support the approval process for the Document Safeguarding Capability, emphasizing secure handling, storage, and transmission of sensitive government information. This subcontract is issued under the Department of Citizenship & Immigration, Government of Canada, and is tied to a NAICS code of 541611, indicating services in computer systems design and related activities. The performance location is in Canada, and the opportunity was posted on June 26, 2026, with a response deadline of July 13, 2026. While no specific point of contact or set-aside provisions are detailed, the scope requires expertise in cloud security frameworks, certification lifecycle management, and governance of third-party risk, making it critical for bidders to demonstrate proven experience in maintaining certifications for public sector clients and managing complex compliance obligations under Canadian federal standards.