Business Analyst (CyberSecurity Access Management)

IT Advantage; Canada; On-site; CAD 90,000 - 130,000; Full time

Job summary

IT Advantage seeks a focused Business Analyst (CyberSecurity Access Management) to lead requirements and design for a unified IAM framework within a public sector health system. You will drive current- and future-state analyses, develop role-based access controls, and coordinate governance with clinical, privacy, cybersecurity, and IT teams.

You will facilitate workshops, analyze user populations, create access matrices, and support rollout activities.

Qualifications

• Bachelor's degree or equivalent in a relevant field.
• 5+ years of business analysis experience in large-scale healthcare or enterprise tech initiatives.
• 3+ years in Identity and Access Management, access governance, or RBAC experience.
• 5+ years working with clinical stakeholders, operational leaders, or healthcare orgs.
• Proficiency with Word, Excel, PowerPoint, Visio, and Teams.

Responsibilities

• Conduct user population analysis.
• Facilitate role engineering workshops.
• Develop access matrices and segregation-of-duties models.
• Support access review processes.
• Present recommendations to governance committees and leadership.

Skills

Identity and Access Management

RBAC design

Requirements gathering

Workshop facilitation

Stakeholder engagement

Healthcare industry experience

Education

Bachelor's degree in Computer Science, Business Administration, Health Informatics, or equivalent

Tools

MS Office suite (Word, Excel, PowerPoint, Visio, Teams)

Job description

Business Analyst (CyberSecurity Access Management)

We are seeking an Access Management Specialist to support a public sector health system's transformation to a unified clinical information platform. This role focuses on developing and implementing a comprehensive Identity and Access Management framework and Role-Based Access Control model that will serve clinical, administrative, and support functions across the organization. The specialist will be responsible for ensuring that access controls are secure, auditable, and aligned with clinical workflows, privacy obligations, and patient safety requirements. This position requires someone who can lead current-state assessments and future-state design activities to support the development of access management strategy, role catalogues, and governance processes. The role encompasses business analysis activities including requirements gathering, stakeholder engagement, workshop facilitation, and process documentation. The specialist will work across clinical, operational, privacy, cybersecurity, and technical teams to define access requirements, validate role designs, support access configuration, and coordinate operational readiness activities.

Responsibilities

• conducting user population analysis
• facilitating role engineering workshops
• developing access matrices and segregation-of-duties models
• supporting access review processes
• presenting recommendations to governance committees and leadership

Qualifications

• Bachelor's degree in Computer Science, Business Administration, Health Informatics, or a similar discipline, or an equivalent combination of education and experience
• 5+ years - business analysis experience including requirements gathering, workshop facilitation, use case analysis, business process analysis, detailed design activities, decision records, and business analysis documentation supporting large-scale healthcare or enterprise technology initiatives
• 3+ years - Identity and Access Management, access governance, or Role-Based Access Control experience
• 5+ years - working with clinical stakeholders, operational leaders, or healthcare organizations
• Proficiency with Microsoft Office products including Word, Excel, PowerPoint, Visio, and Teams
• 3+ years - supporting provider-based healthcare information systems, including large-scale Clinical Information System, Electronic Medical Record, or Electronic Health Record implementations

Nice to Have

• 3+ years - leading RBAC design, role engineering, or access governance initiatives in healthcare environments
• 3+ years - supporting implementation of large-scale Clinical Information Systems
• 3+ years - translating clinical workflows into access and security requirements
• 3+ years - developing role catalogues, access matrices, and segregation-of-duties models
• 3+ years - analyzing privacy legislation, access auditing, or patient information protection requirements
• 2+ years - conducting user population analysis, role mining, or entitlement analysis activities
• 2+ years - presenting recommendations to executives, directors, clinical leaders, and governance committees

Additional Requirements

• Healthcare experience in the work location region
• Verbal and written communication, facilitation, and presentation skills in both French and English