Analyst, Identity Access Management

CIRO; Toronto; On-site; CAD 61,600 - 91,350; Full time

Benefits offered by this job

Hybrid work environment

Health benefits and spending account

Defined contribution pension plan with

Paid flex days and sick days

Paid continuous learning and dev

Job summary

CIRO is seeking an IAM Analyst to support its identity and access management program across its Toronto and Calgary offices. The role ensures employees, contractors, and partners have appropriate access to systems while maintaining compliance with CIRO security policies.

You will work with IT, cybersecurity, HR, and business units to manage user identities, access rights, and authentication mechanisms, including RBAC, MFA, and SSO, with a focus on least privilege and regulatory alignment.

Qualifications

• Bachelor’s degree in Information Technology, Cybersecurity, or related field (or equivalent).
• 4+ years of experience in IAM, IT security, or system administration.
• Familiarity with IAM tools (Okta, SailPoint, Entra ID, Microsoft Defender for Identity, Ping Identity).
• Knowledge of security principles such as least privilege, zero trust, and RBAC.
• Understanding of industry frameworks.
• Strong analytical, problem-solving, and communication skills.

Responsibilities

• Provision, modify, and de-provision user accounts across systems and applications.
• Implement and enforce role-based access controls (RBAC).
• Enhance controls and processes related to Privileged Access Management (PAM).
• Review and approve access requests, ensuring least privilege principles are applied.
• Conduct periodic access reviews and certifications.
• Support multi-factor authentication (MFA) and single sign-on (SSO) solutions.
• Monitor and troubleshoot identity federation and authentication issues.
• Track and report on IAM metrics, anomalies, and potential risks.
• Ensure compliance with regulatory frameworks
• Assist with audits and provide evidence of IAM controls.
• DocumentIAM processes, workflows, and procedures.
• Identify opportunities to automate and streamline IAM operations.
• Partner with cybersecurity teams to align IAM with overall security strategy.
• Work with application owners to integrate IAM solutions into business systems.

Skills

IAM

RBAC

MFA/SSO

Okta/SailPoint/Entra ID

Problem solving

Communication

Education

Bachelor’s degree in IT, Cybersecurity, or related field

Tools

Okta

SailPoint

Entra ID

Microsoft Defender for Identity

Ping Identity

Job description

Toronto Head Office
40 Temperance Street
Suite 2600
Toronto, ON M5H0B4, CAN

Toronto Head Office
40 Temperance Street
Suite 2600
Toronto, ON M5H0B4, CAN

Calgary Office
Bow Valley Square 2
205-5th Avenue S.W., Suite 2200
Calgary, AB T2P2V7, CAN

Calgary Office
Bow Valley Square 2
205-5th Avenue S.W., Suite 2200
Calgary, AB T2P2V7, CAN

As a self-regulatory organization, the Canadian Investment Regulatory Organization (CIRO) is committed to setting high regulatory standards for the investment industry, safeguarding investors, and supporting the integrity of Canada’s capital markets.Join a growing team and contribute to the dynamic and complex world of Canadian capital markets.

The IAM Analyst is responsible for supporting the organization’s identity and access management program.This role ensures that employees, contractors, and partners have theappropriate accessto systems and data whilemaintainingcompliance withCIRO’ssecurity policies, regulatory requirements, andindustrybest practices. The IAM Analyst works closely with IT, cybersecurity, HR, and business units to manage user identities, access rights, and authentication mechanisms.

Key Responsibilities

User Lifecycle Management

• Provision,modify, and de-provision user accounts across systems and applications.
• Ensure timely onboarding/offboarding processes in alignment with HR and IT policies.

Access Control

• Implement and enforce role-based access controls (RBAC).
• Enhance controls and processes related to Privileged Access Management (PAM).
• Review and approve access requests, ensuring least privilege principles are applied.
• Conduct periodic access reviews and certifications.
• Support multi-factor authentication (MFA) and single sign-on (SSO) solutions.
• Monitor and troubleshoot identity federation and authentication issues.

Monitoring & Compliance

• Track and report on IAM metrics, anomalies, and potential risks.
• Ensure compliance with regulatory frameworks
• Assistwith audits and provide evidence of IAM controls.

Process Improvement

• DocumentIAM processes, workflows, and procedures.
• Identifyopportunities to automate and streamline IAM operations.
• Partner with cybersecurity teams to align IAM with overall security strategy.
• Work with application owners to integrate IAM solutions into business systems.

Must Haves

• Bachelor’s degree in Information Technology, Cybersecurity, or related field (or equivalentexperience).
• 4+ years of experience in IAM, IT security, or system administration.
• Familiarity with IAM tools (e.g., Okta, SailPoint,Entra ID, Microsoft Defender for Identity, Ping Identity).
• Knowledge of security principles such as least privilege, zero trust, and RBAC.
• Understanding ofindustryframeworks.
• Strong analytical, problem-solving, and communication skills.

Nice to Haves

• Experience with scripting or automation (PowerShell, Python).
• Certifications such as CISSP, CISM, CISA, or CIAM are a plus.

What we offer:

• Competitive base salary in alignment with market
• Performance based bonus *
• Hybrid work environment
• Employer paid Health Benefits and Spending Account that offer flexibility to meet your individual or family needs as of day one
• Defined Contribution Pension Plan with company matching that starts on your first day of employment *
• Paid flex days and sick days *
• Maternity Leave Of Absence/Paternity Leave Of Absence top up *
• Paid continuous learning and continuing development including designations

*Asterisked offerings are not applicable to contracts

Why the Canadian Investment Regulatory Organization (CIRO):

Our purpose and our impact:

With offices across Canada - from Vancouver to Montreal, our mission is to promote healthy capital markets by regulating fairly and effectively so that investors are protected and confident investing in their futures. As regulators, we understand that we are all investors, and therefore a career with us is a purposeful career: protecting our future.

Culture and Working Environment:

Life at CIRO is purpose and performance- driven. We foster an inclusive culture where teamwork, a forward-thinking attitude, and integrity are at the core of everything we do. This creates an environment where employees thrive, grow, and are empowered to learn and contribute their best.

Joining CIRO means becoming part of a dynamic and transparent organization that values accountability and is committed to maintaining the highest standards of regulatory oversight in the financial industry.

Looking for a career where you can safeguard the integrity of Canadian markets? Join CIRO and be part of the team that secures our financial future.

At CIRO, you’ll be part of an organization driven by Pride in Excellence , a strong Focus on Well ‑ being , and A Shared Purpose that connects our people to meaningful work. We’re committed to fostering an inclusive, supportive environment where you can grow and make an impact. Learn more about what it’s like to build your career at CIRO by exploring our Careers page: https://www.ciro.ca/about-ciro/careers

Our Commitment:

CIRO is an equal opportunity employer and is committed to providing employment accommodationin accordance withthe Ontario Human Rights Code and the Accessibility for Ontarians with Disabilities Act, 2005 (AODA). CIRO will provide accommodation to job applicants with disabilities throughout the recruitment process.Should you require accommodation, please contact Human Resources.

We are committed to creating an inclusive and barrier-free recruitment and selection process across Canada. We welcome applications from all qualified individuals are dedicated to providingaccommodations upon request for candidatesparticipatingin all aspects of the recruitment process,in accordance withapplicable human rights and accessibility legislation.

OurRecruitment Process:

• This posting reflects an active vacancy on our team
• We use automated (AI) tools toassistwith candidate sourcing and communications. Applications are reviewed by our hiring team and hiring decisions are made by people.
• This role has a hiring range of $61,600 - $91,350 with the placement and offered salary being based on knowledge, skills, education/training and experience, as well as external market conditions and internal equity.

While we appreciate receiving applications, only those applicants who closely meet the position requirements will be contacted.#LI-HYBRID#Hiring