Role Title: Information Security Specialist (Segregation of Duties)
Location – 3-4 days to office, downtown Toronto
Duration - Long Term
Job Description:
Information Security Specialist
IAM RBAC & Segregation of Duties (SoD)
SUMMARY Senior security analyst needed to develop stakeholder-driven SoD policies for IAM/RBAC audit remediation. Strong SoD expertise and business analysis skills are essential; SailPoint IdentityIQ experience is preferred. Must work Eastern Time hours.
Engagement
Support a critical Workforce IAM audit-remediation initiative by developing approximately 100+ business-driven SoD policies. The role is onshore, stakeholder-facing, and requires regular collaboration during Eastern Time business hours. Canadian candidates are preferred; location may be flexible if working-hour requirements are met.
Primary Responsibilities
Lead discovery with business stakeholders, application owners, provisioning teams, IAM teams, and technology owners.
Identify SoD conflicts and toxic access combinations across business processes, roles, and entitlements.
Elicit, analyze, challenge, reconcile, and document requirements; do not rely on stakeholders to provide complete technical rules.
Translate business risks and control requirements into precise SoD policies and implementation-ready matrices for Access Management Hub.
Support policy review, validation, testing, refinement, audit evidence, violation management, and remediation activities.
Required Experience
Hands-on experience designing and developing SoD policies, rules, matrices, and controls. Not just experience limited to loading or configuring pre-defined policies.
Strong business analysis skills: stakeholder interviews, workshops, requirements elicitation, business-process analysis, conflict resolution, and clear policy documentation.
Knowledge of IAM, Identity Governance, RBAC, role/entitlement, provisioning, access-risk, and policy-violation knowledge.
Understanding of audit remediation, internal controls, information-security risk, compliance, and preferably SOX or regulated financial-services environments.
Ability to communicate effectively with business, security, audit, IAM, and engineering stakeholders.
Technology & Candidate Profile
Preferred: SailPoint IdentityIQ, including Role SoD and Entitlement SoD concepts. SailPoint is an enabling technology, not the primary selection criterion.
Target profiles: Senior SoD/IAM Business Analyst, Identity Governance/SoD Analyst, IAM Information Security Analyst, RBAC/SoD Specialist, IAM Controls/Access Risk Analyst, or stakeholder-facing SoD Consultant
