IAM Governance Analyst-SailPoint/Banking

BeachHead Inc.; Toronto; On-site; CAD 65,000 - 78,000; Full time

Job summary

BeachHead Inc. is seeking an IAM Governance Analyst-SailPoint/Banking to support enterprise-wide access governance at a major financial institution in Toronto.

You will coordinate access certification campaigns, validate data, and assist with audits. The role requires 1–3 years hands-on experience with access certification and SailPoint IdentityIQ, strong Excel skills (VLOOKUP/XLOOKUP), and knowledge of RBAC and least privilege.

Qualifications

• 1–3 years of hands-on experience supporting access certification, entitlement review, or attestation campaigns.
• Practical experience with SailPoint IdentityIQ or similar identity governance platforms.
• Ability to extract, validate, reconcile, and analyze access-related data using advanced Excel functions (e.g., VLOOKUP, XLOOKUP).
• Working knowledge of access governance processes including RBAC, least privilege, joiner/mover/leaver procedures, and access change management.
• Strong attention to detail and commitment to accuracy.
• Analytical and problem-solving skills.
• Ability to manage multiple priorities and meet deadlines.
• Excellent written and verbal communication skills.
• Professional judgment, accountability, and sense of ownership.

Responsibilities

• Coordinate access certification campaigns, attestations, and reviews across IAM platforms.
• Plan campaigns, schedule, communicate with stakeholders, validate data, and resolve issues.
• Extract, validate, reconcile, and analyse access-related data.
• Monitor campaign progress and track outstanding reviews.
• Follow up with certifiers to ensure timely completion.
• Escalate overdue reviews and high-risk access issues through governance channels.
• Support manual attestation activities as needed.
• Prepare governance reports, trackers, evidence, and control documentation.
• Support remediation tracking for audit findings and process gaps.
• Assist with audit requests and regulatory readiness.
• Identify reporting, process, and automation improvement opportunities.
• Collaborate with business, technology, operations, audit, and risk stakeholders.
• Understand provisioning and deprovisioning concepts when reviewing attestations.

Skills

Access certification

SailPoint IdentityIQ

Excel (advanced)

Data analysis

Governance processes

Attention to detail

Communication skills

Multitasking

Problem solving

Ownership

Tools

ServiceNow workflow

CyberArk

Job description

Working with one of our top financial clients, this role calls for an IAM Governance Analyst-SailPoint/Banking to support enterprise-wide access governance activities. In this role, you will assist with coordinating access certification campaigns, conducting data validation, and supporting audit and compliance activities within a major financial institution. This is an excellent opportunity to deepen your IAM expertise, work with leading tools like SailPoint IdentityIQ, and collaborate with diverse teams across the organization.

Pay rate range (CAD): $47.10/hr - $56.52/hr

Responsibilities

• Coordinate access certification campaigns, entitlement reviews, and attestation activities across IAM-supported platforms
• Support campaign planning, scheduling, stakeholder communications, data validation, and issue resolution
• Extract, validate, reconcile, and analyze access-related data
• Monitor campaign progress and track outstanding access reviews
• Follow up with certifiers and stakeholders to support timely campaign completion
• Escalate overdue reviews, non-compliance, control concerns, and high-risk access issues through governance channels
• Support manual attestation activities as needed
• Prepare and maintain governance reports, trackers, evidence, and control documentation
• Support remediation tracking for audit findings, control deficiencies, and process gaps
• Assist with internal and external audit requests, compliance reviews, and regulatory-readiness activities
• Identify reporting, process, and automation improvement opportunities
• Collaborate with business, technology, operations, audit, and risk stakeholders
• Understand provisioning and deprovisioning concepts when reviewing access changes arising from attestations

Desired Skill-Set

• 1 to 3 years of hands-on experience supporting access certification, entitlement review, or attestation campaigns
• Practical experience with SailPoint IdentityIQ or similar identity governance platforms
• Ability to extract, validate, reconcile, and analyze access-related data using advanced Excel functions (e.g., VLOOKUP, XLOOKUP)
• Working knowledge of access governance processes including role-based access, least privilege, joiner/mover/leaver procedures, and access change management
• Strong attention to detail and commitment to accuracy
• Analytical and problem-solving skills
• Ability to manage multiple priorities and meet deadlines
• Excellent written and verbal communication skills
• Professional judgment, accountability, and sense of ownership

Nice to Have

• Experience supporting access governance in banking, financial services, or regulated industries
• Hands-on experience with ServiceNow workflow, requests, or issue tracking
• Exposure to CyberArk or privileged access management
• Experience supporting access-control audits and compliance activities
• Knowledge of automation or scripting (e.g., VBS) to enhance governance activities

BeachHead is an equal opportunity agency and employer. We advocate for our candidates and welcome applicants regardless of race, color, religion, national origin, sex, age, or physical or mental disability. BeachHead or our clients may use technology-enabled tools, including automation and artificial intelligence (AI), to support parts of the recruitment process such as resume screening, application management, and candidate matching. These tools assist our recruiters and our clients, and do not replace human decision-making. This job posting represents a current or anticipated vacancy. The position may be filled at any time, and the posting may be removed without notice once the role has been filled.