Analyst, Identity Access Management

CIRO / OCRI; Vancouver; Hybrid; CAD 61,600 - 91,350; Full time

Benefits offered by this job

Hybrid work environment

Employer paid Health Benefits and HSA

Defined Contribution Pension Plan

Paid flex days

Vacation days

Maternity/Paternity leave top up

Continuous learning and designations

Job summary

CIRO, the Canadian Investment Regulatory Organization, is seeking an IAM Analyst to support identity and access management programs across the organization. The role collaborates with IT, cybersecurity, HR, and business units to manage user identities, access rights, and authentication mechanisms.

Responsibilities include lifecycle management, RBAC enforcement, MFA/SSO support, access reviews, and audit-readiness.

Qualifications

• Bachelor’s degree or equivalent experience in IT, cybersecurity, or related field.
• 4+ years of experience in IAM, IT security, or system administration.
• Familiarity with IAM tools (e.g., Okta, SailPoint, Entra ID, Microsoft Defender for Identity, Ping Identity).
• Knowledge of security principles such as least privilege, zero trust, and RBAC.
• Strong analytical, problem-solving, and communication skills.

Responsibilities

• Provision, modify, and de-provision user accounts across systems and applications.
• Ensure timely onboarding/offboarding in alignment with HR and IT policies.
• Implement and enforce RBAC and PAM controls.
• Review access requests, ensuring least privilege principles are applied.
• Conduct periodic access reviews and certifications.
• Authentication & Authorization: Support MFA and SSO solutions.
• Monitor and troubleshoot identity federation and authentication issues.
• Track IAM metrics, anomalies, and potential risks.
• Ensure compliance with regulatory frameworks and assist with audits.
• Document IAM processes, workflows, and procedures.
• Identify opportunities to automate and streamline IAM operations.
• Collaborate with cybersecurity teams and application owners to align IAM with security strategy.

Skills

IAM

RBAC

MFA

SSO

Okta

SailPoint

Entra ID

PAM

zero trust

least privilege

problem solving

communication

Education

Bachelor’s degree in Information Technology, Cybersecurity, or related field

Tools

Okta

SailPoint

Entra ID

Microsoft Defender for Identity

Ping Identity

Job description

As a self-regulatory organization, theCanadian Investment Regulatory Organization (CIRO)is committed to setting high regulatory standards for the investment industry, safeguarding investors, and supporting the integrity of Canada’s capital markets.Join a growing team and contribute to the dynamic and complex world of Canadian capital markets.

The IAM Analyst is responsible for supporting the organization’s identity and access management program. This role ensures that employees, contractors, and partners have the appropriate access to systems and data while maintaining compliance with CIRO’s security policies, regulatory requirements, and industry best practices. The IAM Analyst works closely with IT, cybersecurity, HR, and business units to manage user identities, access rights, and authentication mechanisms.

Key Responsibilities

User Lifecycle Management

• Provision, modify, and de-provision user accounts across systems and applications.
• Ensure timely onboarding/offboarding processes in alignment with HR and IT policies.

Access Control

• Implement and enforce role-based access controls (RBAC).
• Enhance controls and processes related to Privileged Access Management (PAM).
• Review and approve access requests, ensuring least privilege principles are applied.
• Conduct periodic access reviews and certifications.
• Authentication & Authorization
• Support multi-factor authentication (MFA) and single sign-on (SSO) solutions.
• Monitor and troubleshoot identity federation and authentication issues.

Monitoring & Compliance

• Track and report on IAM metrics, anomalies, and potential risks.
• Ensure compliance with regulatory frameworks
• Assist with audits and provide evidence of IAM controls.

Process Improvement

• Document IAM processes, workflows, and procedures.
• Identify opportunities to automate and streamline IAM operations.

Collaboration

• Partner with cybersecurity teams to align IAM with overall security strategy.
• Work with application owners to integrate IAM solutions into business systems.

Must Haves

• Bachelor’s degree in Information Technology, Cybersecurity, or related field (or equivalent experience).
• 4+ years of experience in IAM, IT security, or system administration.
• Familiarity with IAM tools (e.g., Okta, SailPoint, Entra ID, Microsoft Defender for Identity, Ping Identity).
• Knowledge of security principles such as least privilege, zero trust, and RBAC.
• Understanding of industry frameworks .
• Strong analytical, problem-solving, and communication skills.

Nice to Haves

• Experience with scripting or automation (PowerShell, Python).
• Exposure to cloud platforms (AWS, Azure).
• Certifications such as CISSP, CISM, CISA, or CIAM are a plus.

What we offer:

• Competitive base salary in alignment with market
• Performance based bonus *
• Hybrid work environment
• Employer paid Health Benefits and Spending Account that offer flexibility to meet your individual or family needs as of day one
• Defined Contribution Pension Plan with company matching that starts on your first day of employment *
• Paid flex days and sick days *
• Vacation days
• Maternity Leave Of Absence/Paternity Leave Of Absence top up *
• Paid continuous learning and continuing development including designations
• Asterisked offerings are not applicable to contracts

Why the Canadian Investment Regulatory Organization (CIRO):

Our purpose and our impact:

With offices across Canada - from Vancouver to Montreal, our mission is to promote healthy capital markets by regulating fairly and effectively so that investors are protected and confident investing in their futures. As regulators, we understand that we are all investors, and therefore a career with us is a purposeful career: protecting our future.

Culture and Working Environment:

Life at CIRO is purpose and performance- driven. We foster an inclusive culture where teamwork, a forward-thinking attitude, and integrity are at the core of everything we do. This creates an environment where employees thrive, grow, and are empowered to learn and contribute their best.

Joining CIRO means becoming part of a dynamic and transparent organization that values accountability and is committed to maintaining the highest standards of regulatory oversight in the financial industry.

Looking for a career where you can safeguard the integrity of Canadian markets? Join CIRO and be part of the team that secures our financial future.

At CIRO, you’ll be part of an organization driven by Pride in Excellence, a strong Focus on Well‑being, and A Shared Purpose that connects our people to meaningful work. We’re committed to fostering an inclusive, supportive environment where you can grow and make an impact. Learn more about what it’s like to build your career at CIRO by exploring our Careers page: https://www.ciro.ca/about-ciro/careers

Our Commitment:

• This posting reflects an active vacancy on our team
• We use automated (AI) tools to assist with candidate sourcing and communications. Applications are reviewed by our hiring team and hiring decisions are made by people.
• This role has a hiring range of $61,600 - $91,350 with the placement and offered salary being based on knowledge, skills, education/training and experience, as well as external market conditions and internal equity.

While we appreciate receiving applications, only those applicants who closely meet the position requirements will be contacted. #Hiring