Senior IAM Specialist to support the Information Security Office by strengthening identity governance, PAM, and access control practices across the organiz

Senior IAM Specialist to support the Information Security Office by strengthening identity governance, PAM, and access control practices across the organization.

An initial 18-month contract with a possible 6 month extension. Hybrid work model.

Responsibilities:

Identity and Access Management Responsibilities

• Act as a subject matter expert for Identity and Access Management within the organization.
• Design, review, and improve IAM controls and governance practices.
• Support the implementation and operation of Privileged Access Management (PAM) solutions, including CyberArk.
• Implement and maintain Privileged Identity Management (PIM) controls within Microsoft environments.
• Manage and optimize identity governance processes including access reviews, role governance, and entitlement management.
• Support identity architecture and configuration across Active Directory and Microsoft Entra ID environments.
• Assist with the design and improvement of privileged account management processes. • Ensure that IAM practices align with least privilege and zero trust principles.

Security Monitoring and Integration

• Contribute to security monitoring related to identity activities using Microsoft Sentinel.
• Collaborate with operational cybersecurity teams to investigate identity-related security alerts or anomalies.

Automation and Operational Efficiency

• Identify opportunities to automate IAM processes such as provisioning, de-provisioning, access reviews, and privileged access management workflows.
• Implement or recommend automation solutions where appropriate to improve efficiency and reduce operational risk.

Advisory and Documentation

• Provide advisory support to technology teams regarding IAM best practices.
• Produce technical documentation supporting audits, architecture design, or operational processes.
• Contribute to the definition and documentation of IAM security standards and procedures.

Risk and Compliance

• Support risk assessments related to identity security.
• Ensure IAM controls align with recognized frameworks including:
• NIST Cybersecurity Framework
• ITSG guidance where applicable
• OSFI B-13 regulatory expectations

Agile Collaboration

• Contribute to Agile delivery cycles by participating in sprint planning, backlog refinement, scrums, and retrospectives.
• Write and manage security-related user stories where required.
• Work collaboratively with Product Owners, architects, and technology teams.

Must Have Skills:

• Minimum 5 years of experience in Identity and Access Management roles.
• CyberArk Certification
• Experience working in organizations with 1,000-2,000 employees or more.
• Demonstrated experience with enterprise IAM technologies and identity governance processes.
• Strong expertise in the following technologies:
• Privileged Access Management (PAM)
• Privileged Identity Management (PIM)
• Microsoft Entra ID
• Active Directory
• Identity governance and access review processes
• Additional knowledge considered could be useful: Microsoft Sentinel, Microsoft Defender, Microsoft Data Loss Prevention (DLP)
• Knowledge of at least one of the following frameworks: NIST Cybersecurity Framework, ITSG guidance, OSFI B-13
• University degree or college diploma in Information Technology, Computer Science, Engineering, or equivalent experience.

Nice to Have Skills:

• Experience within the financial services, insurance, or mortgage sector is considered an asset.
• Cybersecurity certifications related to IAM or security architecture (strong asset)
• Bilingualism (French and English) is considered a strong asset but is not mandatory.