Security and Certifications Analyst

Location: Ottawa, Canada

Thales people architect identity management and data protection solutions at the heart of digital security. Business and governments rely on us to bring trust to the billons of digital interactions they have with people. Our technologies and services help banks exchange funds, people cross borders, energy become smarter and much more. More than 30,000 organizations already rely on us to verify the identities of people and things, grant access to digital services, analyze vast quantities of information and encrypt data to make the connected world more secure.

This role is Remote Eligible

As a key member of the Product Security & Compliance team, the Security & Certifications (S&C) Analyst plays a critical role in
managing and executing product security evaluations across multiple sites. This position ensures that products meet stringent security
standards and achieve certifications such as Crypto Module Validation Program (CMVP), Common Criteria (CC), and other region-
specific requirements. The S&C Analyst collaborates closely with internal engineering teams and external certification bodies to
streamline the certification process, ensuring timely and cost-effective delivery of compliant products.
 

This role is essential to maintaining the integrity and trustworthiness of our product portfolio and supports the ongoing management of
Cybersecurity and Digital Identity (CDI) /Cyber Security Product (CSP) certifications.
 

Key Areas of Responsibility:

Lead and Manage Certification Projects
• Drive the execution of security certification projects for new and existing products.
• Deliver certifications on schedule and within budget.
 

Cross-Functional Collaboration

• Partner with product owners and engineering teams to define certification strategies, collaborate in planning, and manage
evaluations activities to achieve target certifications.
• Guide teams through evaluation activities to address security and certifications and ensure alignment with certification
requirements.
 

Project Oversight and Reporting
• Develop and maintain detailed project plans.
• Track progress against milestones and provide regular status updates.
• Escalate issues and roadblocks to leadership as needed.
 

Industry Engagement
• Participate in relevant standards bodies and working groups.
• Stay informed on emerging security standards and regulatory changes.

Minimum Requirements:
• Bachelor’s degree in Computer Science, Computer Engineering, Electrical Engineering, or equivalent experience.
• Minimum 5 years of direct experience in security evaluations for commercial products.
• Hands-on experience with FIPS 140-2/3, Common Criteria, and/or PCI certifications.
• Strong verbal and written communication skills in English.
• Proven ability to work independently in a fast-paced, dynamic environment.
• Demonstrated problem-solving skills and experience working with cross-functional teams.
 

Preferred Qualifications
• Broad understanding of hardware, software, and systems engineering practices.
• Experience in product development across engineering domains.
• Proactive and solution-oriented mindset.
• Technically curious with a passion for solving complex challenges.
• Creative thinker with the ability to connect technical concepts to business value.
• Highly responsive and adaptable to shifting priorities.

Why Join Us?

Say HI and learn more about working at Thales click here.

#LI-Remote

#LI-MG1

Thales is an equal opportunity employer which values diversity and inclusivity in the workplace. Thales is committed to providing accommodations in all parts of the interview process. Applicants selected for an interview who require accommodation are asked to advise accordingly upon the invitation for an interview. We will work with you to meet your needs. All accommodation information provided will be treated as confidential and used only for the purpose of providing an accessible candidate experience.