Information Security Specialist
- Toronto, ON, Canada
Contract
Applications open in a new tab.
Job details
- Job type
- Contract
- Apply by
- Posting language
- English
- Posted
Original job description
Role Title: Information Security Specialist (Segregation of Duties)
Location – 3-4 days to office, downtown Toronto
Duration - Long Term
Job Description:
Information Security Specialist
IAM RBAC & Segregation of Duties (SoD)
SUMMARY Senior security analyst needed to develop stakeholder-driven SoD policies for IAM/RBAC audit remediation. Strong SoD expertise and business analysis skills are essential; SailPoint IdentityIQ experience is preferred. Must work Eastern Time hours.
Engagement
Support a critical Workforce IAM audit-remediation initiative by developing approximately 100+ business-driven SoD policies. The role is onshore, stakeholder-facing, and requires regular collaboration during Eastern Time business hours. Canadian candidates are preferred; location may be flexible if working-hour requirements are met.
Primary Responsibilities
Lead discovery with business stakeholders, application owners, provisioning teams, IAM teams, and technology owners.
Identify SoD conflicts and toxic access combinations across business processes, roles, and entitlements.
Elicit, analyze, challenge, reconcile, and document requirements; do not rely on stakeholders to provide complete technical rules.
Translate business risks and control requirements into precise SoD policies and implementation-ready matrices for Access Management Hub.
Support policy review, validation, testing, refinement, audit evidence, violation management, and remediation activities.
Required Experience
Hands-on experience designing and developing SoD policies, rules, matrices, and controls. Not just experience limited to loading or configuring pre-defined policies.
Strong business analysis skills: stakeholder interviews, workshops, requirements elicitation, business-process analysis, conflict resolution, and clear policy documentation.
Knowledge of IAM, Identity Governance, RBAC, role/entitlement, provisioning, access-risk, and policy-violation knowledge.
Understanding of audit remediation, internal controls, information-security risk, compliance, and preferably SOX or regulated financial-services environments.
Ability to communicate effectively with business, security, audit, IAM, and engineering stakeholders.
Technology & Candidate Profile
Preferred: SailPoint IdentityIQ, including Role SoD and Entitlement SoD concepts. SailPoint is an enabling technology, not the primary selection criterion.
Target profiles: Senior SoD/IAM Business Analyst, Identity Governance/SoD Analyst, IAM Information Security Analyst, RBAC/SoD Specialist, IAM Controls/Access Risk Analyst, or stakeholder-facing SoD Consultant
More about this job
Responsibilities
Lead stakeholder discovery to identify segregation-of-duties conflicts and toxic access combinations across business processes, roles, and entitlements. Translate business risks and control requirements into documented, implementation-ready policies and matrices, and support validation, testing, audit evidence, violation management, and remediation.
Requirements
Requires hands-on experience designing SoD policies, rules, matrices, and controls, along with strong business analysis and stakeholder facilitation skills. Candidates should understand IAM, identity governance, RBAC, access risk, audit remediation, and internal controls; SailPoint IdentityIQ experience is preferred.
Skills
- Segregation Of Duties
- Identity And Access Management
- Role-Based Access Control
- Identity Governance
- Business Analysis
- Stakeholder Management
- Requirements Elicitation
- Business Process Analysis
- Access Risk Analysis
- Policy Development
- Audit Remediation
- Internal Controls
- SailPoint IdentityIQ
- Access Provisioning
- Compliance
- Policy Violation Management
Visa sponsorship
Not detected in the job text
Categories
- Security & Safety
- Technology
- Consulting
Keywords
- Information Security
- Identity And Access Management
- IAM
- Role-Based Access Control
- RBAC
- Segregation Of Duties
- SoD Policies
- Identity Governance
- SailPoint IdentityIQ
- Role SoD
- Entitlement SoD
- Access Management Hub
- Access Provisioning
- Entitlements
- Access Risk
- Policy Violations
- Audit Remediation
- Internal Controls
- Compliance
- SOX
- Financial Services
- Business Analysis
- Stakeholder Interviews
- Requirements Elicitation
- Business Process Analysis
- Policy Documentation
- Policy Validation
- Testing
- Audit Evidence
- Remediation