Information Security Specialist (RBAC & SOD)
- Toronto, ON, Canada
Contract
Applications open in a new tab.
Job details
- Job type
- Contract
- Apply by
- Posting language
- English
- Posted
Original job description
Role: Information Security Specialist (RBAC & SOD)
Location: Toronto, ON-Hybrid - 3 days onsite
Duration: 1 year contract
What are the top 3 skills required for this role?
RBAC, SOD, SailPoint
Job Description/ Responsibilities
Seeking an experienced Identity and Access Management specialist to enhance and optimize the organization's access management framework. The successful candidate will work with internal clients and technology teams to identify and define SOD policies and design and implement automated solutions to streamline access management processes. The ideal candidate will bring extensive expertise in implementing and automating segregation of duties policies and role-based security controls in complex enterprise environments.
Here's some of what you may be asked to perform:
Contribute to SOD Policy creation and maintenance for assigned business applications, articulate and document Segregation of Duties policy requirements in collaboration with application subject matter experts.
Guide stakeholders within defined parameters related to specific Technology Controls and Information Security programs, policies, standards, and incidents.
Support development of technology risk reporting, monitoring key trends and defining metrics to measure control effectiveness for your own area.
Support technology processes, help launch governance practices to monitor, detect, prevent, and react to current and emerging security threats, specifically within the Workforce Identity and Access Management space.
Facilitate the Emerging Tech program working with various stakeholders including third party vendors, executives and various internal teams.
Be a subject matter expert in Technology Risk related policies, procedures, technology control standards and regulatory guidelines.
Apply a teamwork philosophy with technology and partners, service, or platform owners to integrate all technology security components and address control gaps.
Follow and promote relevant enterprise frameworks and methodologies (Agile methodologies including the Next Evolution of Work)
Research and investigate regulatory compliance requirements, reporting and questions, support the team in resolving compliance, audit, and regulatory issues.
Adhere to policies, procedures, technology control standards and regulatory guidelines.
Contribute to internal activity and process review, flag windows for improvement.
Follow relevant enterprise frameworks and methodologies.
Influence behavior to reduce risk, foster a strong technology risk management culture.
Assess, identify, and escalate issues appropriately where required.
Contribute to definition of role management and separation of duties business framework and capabilities that align with our access management control standards.
Interpret internal/external business issues and recommend best practices pertaining to SOD Policies.
Deliver business services, functions and capabilities that optimize the use of process, technology, and our people, and take advantage of scale and operating model.
Job Requirements:
What can you bring? Share your credentials, but your relevant experience and knowledge can be just as likely to get our attention. It helps if you have:
University Degree or equivalent.
Information Security Certification / Accreditation an asset.
5-7 years of relevant experience.
Ability to communicate effectively at all levels of the organization with an emphasis on senior leadership.
Strong background in access governance and compliance frameworks.
Experience implementing technology controls to address IAM related risks.
Deep knowledge of Technology Risks and Controls as well as Risk treatment policies and procedures.
Deep understanding of Identity and Access Management (IAM) principles.
Demonstrated ability to succeed in projects of moderate to high complexity.
Sound knowledge of Microsoft Excel, PowerPoint, SharePoint, Teams, Confluence and Power BI with an enhanced focus on automated reporting and dashboards.
Experience with enterprise-level IAM platforms and tools including SailPoint.
Providing complex IAM reporting, analysis, and assessments.
Years of Experience:
8.00 Years of Experience
Authorization: Applicants must be legally authorized to work in Canada.
Regards,
_______________________
Parthasarathy K
Lead Recruiter
Work: 972-474-8787 Ext: 306,Direct: 972-737-8607
Partha.k@themesoft.com
Themesoft Inc |Themesoft Jobs
More about this job
Responsibilities
Develop and maintain segregation-of-duties policies and role-management frameworks, and implement automated access-management controls in collaboration with business and technology stakeholders. Monitor technology risks and control effectiveness, support compliance and audit activities, and help improve workforce identity and access management governance.
Requirements
The role calls for 5–7 years of relevant experience (the posting also lists 8 years), a university degree or equivalent, and strong IAM, access governance, technology risk, and compliance expertise. Candidates should have experience with enterprise IAM platforms such as SailPoint, complex IAM reporting and assessments, and communicating effectively with stakeholders at all organizational levels.
Skills
- Role-Based Access Control (RBAC)
- Segregation of Duties (SOD)
- SailPoint
- Identity and Access Management (IAM)
- Access Governance
- Technology Risk Management
- Security Controls
- Regulatory Compliance
- IAM Reporting and Analysis
- Automated Reporting and Dashboards
- Stakeholder Communication
- Microsoft Excel
- Power BI
- Agile Methodologies
Visa sponsorship
Not detected in the job text
Hiring contact
Parthasarathy K
Hiring contact email
Partha.k@themesoft.com
Categories
- Technology
- Security & Safety
- Finance & Accounting
- Data & Analytics
Keywords
- Role-Based Access Control (RBAC)
- Segregation of Duties (SOD)
- SailPoint
- Identity and Access Management (IAM)
- Workforce Identity and Access Management
- Access Governance
- Role Management
- Technology Risk
- Technology Controls
- Risk Treatment
- Regulatory Compliance
- Audit
- Security Policies
- Control Effectiveness
- Automated Access Management
- IAM Reporting
- Power BI
- Microsoft Excel
- PowerPoint
- SharePoint
- Microsoft Teams
- Confluence
- Agile Methodologies
- Governance
- Banking
- Information Security