Analyst, Identity Access Management

CIRO / OCRI; Montreal (administrative region); Hybrid; CAD 75,000 - 110,000; Full time

Benefits offered by this job

Hybrid work environment

Health Benefits & Spending Account

Defined Contribution Pension Plan

Paid flex days & sick days

Vacation days

Maternity/Paternity leave top up

Continuous learning and designations

Job summary

CIRO is seeking an IAM Analyst to support identity and access management for employees, contractors, and partners. You will manage user identities, access rights, and authentication while ensuring compliance with CIRO security policies and regulatory requirements.

You will collaborate with IT, cybersecurity, HR, and business units to maintain least privilege access, deploy MFA/SSO, and contribute to audits and ongoing process improvements. Hybird work arrangement is offered.

Qualifications

• Bachelor’s degree in Information Technology, Cybersecurity, or related field (or equivalent).
• 4+ years of experience in IAM, IT security, or system administration.
• Familiarity with IAM tools (Okta, SailPoint, Entra ID, Defender for Identity, Ping Identity).
• Knowledge of least privilege, zero trust, and RBAC; understanding of industry frameworks.

Responsibilities

• Provision, modify, and de‑provision user accounts across systems and applications.
• Manage onboarding/offboarding processes aligned with HR and IT policies.
• Implement and enforce RBAC and Privileged Access Management (PAM).
• Review and approve access requests ensuring least privilege.
• Conduct periodic access reviews and certifications.
• Support MFA and single sign-on (SSO) solutions.
• Monitor and troubleshoot identity federation and authentication issues.
• Document IAM processes and look for automation opportunities.
• Collaborate with cybersecurity teams and application owners.

Skills

IAM

RBAC

MFA/SSO

Zero Trust

Analytical

Education

Bachelor’s degree in IT or related

Tools

Okta

SailPoint

Entra ID

Microsoft Defender for Identity

Ping Identity

Job description

As a self-regulatory organization, theCanadian Investment Regulatory Organization (CIRO)is committed to setting high regulatory standards for the investment industry, safeguarding investors, and supporting the integrity of Canada’s capital markets.Join a growing team and contribute to the dynamic and complex world of Canadian capital markets.

The IAM Analyst is responsible for supporting the organization’s identity and access management program. This role ensures that employees, contractors, and partners have the appropriate access to systems and data while maintaining compliance with CIRO’s security policies, regulatory requirements, and industry best practices. The IAM Analyst works closely with IT, cybersecurity, HR, and business units to manage user identities, access rights, and authentication mechanisms.

Key Responsibilities

User Lifecycle Management

• Provision, modify, and de‑provision user accounts across systems and applications.
• Ensure timely onboarding/offboarding processes in alignment with HR and IT policies.

Access Control

• Implement and enforce role-based access controls (RBAC).
• Enhance controls and processes related to Privileged Access Management (PAM).
• Review and approve access requests, ensuring least privilege principles are applied.
• Conduct periodic access reviews and certifications.
• Authentication & Authorization.
• Support multi-factor authentication (MFA) and single sign-on (SSO) solutions.
• Monitor and troubleshoot identity federation and authentication issues.

Monitoring & Compliance

• Track and report on IAM metrics, anomalies, and potential risks.
• Ensure compliance with regulatory frameworks.
• Assist with audits and provide evidence of IAM controls.

Process Improvement

• Document IAM processes, workflows, and procedures.
• Identify opportunities to automate and streamline IAM operations.

Collaboration

• Partner with cybersecurity teams to align IAM with overall security strategy.
• Work with application owners to integrate IAM solutions into business systems.

Must Haves

• Bachelor’s degree in Information Technology, Cybersecurity, or related field (or equivalent experience).
• 4+ years of experience in IAM, IT security, or system administration.
• Familiarity with IAM tools (e.g., Okta, SailPoint, Entra ID, Microsoft Defender for Identity, Ping Identity).
• Knowledge of security principles such as least privilege, zero trust, and RBAC.
• Understanding of industry frameworks.
• Strong analytical, problem‑solving, and communication skills.

Nice to Haves

• Experience with scripting or automation (PowerShell, Python).
• Exposure to cloud platforms (AWS, Azure).
• Certifications such as CISSP, CISM, CISA, or CIAM are a plus.

What we offer

• Competitive base salary in alignment with market.
• Performance based bonus.
• Hybrid work environment.
• Employer paid Health Benefits and Spending Account that offer flexibility to meet your individual or family needs as of day one.
• Defined Contribution Pension Plan with company matching that starts on your first day of employment.
• Paid flex days and sick days.
• Vacation days.
• Maternity Leave Of Absence/Paternity Leave Of Absence top up.
• Paid continuous learning and continuing development including designations.

Our Commitment

CIRO is an equal opportunity employer and is committed to providing employment accommodation in accordance with the Ontario Human Rights Code and the Accessibility for Ontarians with Disabilities Act, 2005 (AODA). CIRO will provide accommodation to job applicants with disabilities throughout the recruitment process. Should you require accommodation, please contact Human Resources.

We are committed to creating an inclusive and barrier-free recruitment and selection process across Canada. We welcome applications from all qualified individuals and are dedicated to providing accommodations upon request for candidates participating in all aspects of the recruitment process, in accordance with applicable human rights and accessibility legislation.