Information Security Specialist – (RBAC & SoD)
- Toronto, ON, Canada
The annual salary for this position is between $[105,500 - 124,000] depending on experience and other qualifications of the successful candidate. · Full-time
Applications open in a new tab.
Job details
- Pay
- The annual salary for this position is between $[105,500 - 124,000] depending on experience and other qualifications of the successful candidate.
- Job type
- Full-time
- Apply by
- Experience
- 5–7 years of experience in Identity and Access Management (IAM), Information Security, Technology Risk, or Access Governance roles.
- Posting language
- English
- Posted
Original job description
About Cloud Infrastructure & Security Services: Cognizant’s Cloud, Infrastructure, and Security Services Practice (CIS), is all about embracing digital transformation by driving core modernization holistically across layers. We help customers transform infrastructure and workplace to meet the rapidly evolving needs of the digital era. Our holistic approach delivers key results for our customers by achieving cloud driven modernization and workplace and operational transformation to run the business in a secure environment.
Job Summary
We are seeking an Information Security Specialist to support the Workforce Identity and Access Management (WIAM) team with a focus on Role-Based Access Control (RBAC) and Segregation of Duties (SoD) governance. This role will be responsible for enhancing the organization’s IAM security posture through the design, implementation, and maintenance of access governance controls, SoD policies, and risk management processes. The ideal candidate will possess strong experience in IAM governance, compliance, access controls, and risk reporting, along with the ability to partner effectively with business, technology, audit, and security stakeholders.
In This Role, You Will
- Develop, maintain, and enhance Segregation of Duties (SoD) policies and controls across enterprise applications and technology platforms.
- Partner with application owners, business stakeholders, and technology teams to identify, analyze, and document SoD requirements and access governance controls.
- Support the design and implementation of Role-Based Access Control (RBAC) frameworks, role management capabilities, and access governance processes.
- Conduct IAM risk assessments, identify control gaps, and recommend remediation strategies to improve Workforce IAM security controls.
- Develop and maintain reporting, dashboards, KPIs, and metrics to measure the effectiveness of IAM governance and compliance controls.
- Support audits, regulatory reviews, compliance assessments, evidence collection, and remediation activities related to IAM controls.
- Provide guidance and subject matter expertise on IAM governance, technology risks, control frameworks, and regulatory requirements.
- Collaborate with security, risk, audit, and technology teams to monitor, detect, and address emerging IAM-related risks and vulnerabilities.
- Facilitate governance activities, stakeholder workshops, risk reviews, and working sessions to drive control adoption and maturity.
- Contribute to process improvements, operational efficiencies, and automation initiatives within the IAM governance domain.
- 5–7 years of experience in Identity and Access Management (IAM), Information Security, Technology Risk, or Access Governance roles.
- Strong understanding of IAM principles including RBAC, SoD, access governance, entitlements management, identity lifecycle management, and compliance controls.
- Experience implementing technology controls and governance processes to address IAM-related risks.
- Familiarity with enterprise IAM platforms such as SailPoint, Saviynt, CyberArk, Okta, Microsoft Entra ID, or similar solutions.
- Experience supporting regulatory, compliance, audit, and risk management programs.
- Strong knowledge of technology risk management frameworks, control standards, and risk treatment methodologies.
- Experience developing dashboards, metrics, automated reporting, and risk analytics using tools such as Power BI, Excel, SharePoint, and related platforms.
- Strong communication and stakeholder management skills with the ability to engage senior leadership and business partners.
- Experience working in Agile delivery environments and enterprise governance frameworks.
- Professional certifications such as CISSP, CISM, CRISC, Security+, or IAM-related certifications are preferred.
#Ind123
Applications will be accepted until 23 Oct 2026.
Salary And Other Compensation
The annual salary for this position is between $[105,500 - 124,000] depending on experience and other qualifications of the successful candidate.
This position is also eligible for Cognizant’s discretionary annual incentive program, based on performance and subject to the terms of Cognizant’s applicable plans.
Benefits: Cognizant offers the following benefits for this position, subject to applicable eligibility requirements:
- Medical/Dental/Vision/Life Insurance
- Paid holidays plus Paid Time Off
- Long-term/Short-term Disability
- Paid Parental Leave
More about this job
Responsibilities
Develop and maintain SoD policies, RBAC frameworks, access governance controls, and IAM risk management processes across enterprise applications and platforms. Support audits and compliance reviews, report on control effectiveness, advise stakeholders, and drive remediation, process improvement, and automation initiatives.
Requirements
Requires 5–7 years of experience in IAM, information security, technology risk, or access governance, with strong knowledge of RBAC, SoD, access governance, identity lifecycle management, and compliance controls. Candidates should have experience with enterprise IAM platforms, audits and risk programs, reporting tools such as Power BI and Excel, and stakeholder engagement; relevant security certifications are preferred.
Skills
- Identity and Access Management
- Role-Based Access Control
- Segregation of Duties
- Access Governance
- Entitlements Management
- Identity Lifecycle Management
- IAM Risk Assessment
- Technology Risk Management
- Compliance Controls
- Audit Support
- Risk Reporting
- Dashboard Development
- Stakeholder Management
- SailPoint
- Saviynt
- CyberArk
Benefits
- Medical Insurance
- Dental Insurance
- Vision Insurance
- Life Insurance
- Paid Holidays
- Paid Time Off
- Long-Term Disability
- Short-Term Disability
- Paid Parental Leave
- Discretionary Annual Incentive Program
Visa sponsorship
Not detected in the job text
Categories
- Technology
- Security & Safety
- Consulting
- Management & Leadership
Keywords
- Identity and Access Management
- Workforce Identity and Access Management
- Role-Based Access Control
- Segregation of Duties
- Access Governance
- Entitlements Management
- Identity Lifecycle Management
- IAM Risk Assessment
- Technology Risk Management
- Risk Treatment
- Compliance Controls
- Regulatory Reviews
- Audit Evidence Collection
- Control Remediation
- SailPoint
- Saviynt
- CyberArk
- Okta
- Microsoft Entra ID
- Power BI
- Excel
- SharePoint
- Dashboards
- KPIs
- Risk Analytics
- Agile Delivery
- CISSP
- CISM
- CRISC
- Security+