ITSG-33 Cybersecurity Control Evaluator

This subcontract opportunity is for an ITSG-33 Cybersecurity Control Evaluator to support prime contractors on projects for the Financial Consumer Agency of Canada. The selected provider will perform internal evaluations of IT security controls, utilizing the ITSG-33 Annex 3A framework and harmonized threat and risk assessment methodologies. Key responsibilities include conducting evidence collection, performing gap analyses, determining residual risks, and developing prioritized remediation plans to ensure robust security postures. The project is based in the National Capital Region and requires the delivery of a detailed, evidence-based internal report. Candidates must possess Reliability status security clearance to be eligible. The solicitation was posted on October 6, 2026, with a response deadline of October 22, 2026.