Senior IT security TRA and C&A analyst

The Public Service Commission of Canada is seeking professional IT security expertise under solicitation CON26-0009 to support the development and maturation of its enterprise-wide IT security program, with a focus on safeguarding sensitive and private information. This requirement is for one Level 3 Senior IT Security TRA and C&A Analyst to provide services on an “As and When Required” basis through a Task Authorization Contract, aligned with the broader PSC security and privacy strategies. The resource must be a qualified holder of the TBIPS Supply Arrangement EN578-170432 under Tier 1 for the National Capital Region, with capability in Category C.3 for threat and risk assessment and certification and accreditation, and must be certified as an Indigenous business under the Procurement Strategy for Indigenous Business. The contract has a base period of three years with an additional one-year irrevocable option, and the place of performance is restricted to the National Capital Region. The work involves advising on governance improvements and ensuring controls are robust, sustainable, and compliant with federal standards. All bidders must meet stringent security requirements, including a minimum corporate security clearance of Secret and a resource clearance of Reliability or Secret, with document safeguarding at Protected B level under Common PS SRCL #36. Proposals are restricted to qualified TBIPS holders who have been directly invited by the Contracting Authority, and the procurement is exclusively set aside for Indigenous businesses that certify compliance with PSIB criteria. The solicitation closed on June 16, 2026, and responses were to be submitted to Angela Yang, the designated Contracting Authority. The estimated contract value is capped at $3.75 million, and while evaluation factors are not published publicly, RFP details were to be sent directly to eligible suppliers. The Crown reserves the right to negotiate, and unsuccessful bidders may request a debriefing within 15 working days of notification. The NAICS code for this procurement is 541611, reflecting its classification under management consulting services.