IAM RBAC Business Solution Analyst Lead

Marsh; Toronto; On-site; CAD 160,000 - 210,000; Full time

Job summary

Marsh is seeking an experienced IAM RBAC Business Solutions Lead to establish, own, and drive the enterprise RBAC function across global teams. You will define the RBAC strategy, build the operating model, and lead implementation to embed RBAC as a sustainable capability.

The role requires hands-on deployment in environments without formal RBAC, design of roles, governance, and ongoing lifecycle management, plus collaboration with IAM, Cybersecurity, HR, and business units.

Qualifications

• Demonstrable experience owning an enterprise RBAC capability with strategy and delivery accountability.
• Proven deployment of RBAC in environments lacking a formal framework.
• Hands-on experience with SailPoint IdentityIQ/SailPoint Cloud/Oracle OIM/Saviynt.

Responsibilities

• Own the enterprise RBAC function, strategy, roadmap, governance, and performance.
• Lead deployment of RBAC where none existed, creating framework, ownership, and processes.
• Establish RBAC as a sustainable capability across units, apps, and regions.
• Translate requirements into scalable RBAC and access governance solutions.
• Build partnerships with business, technology, IAM, security, HR, risk, and compliance.
• Lead role discovery, design, validation, certification, and lifecycle management.

Skills

RBAC leadership

IAM & access governance

Stakeholder management

Roadmap & strategy

Cross-functional leadership

Tools

SailPoint IdentityIQ

SailPoint Identity Security Cloud

Oracle Identity Manager

Saviynt

Job description

Marsh is seeking an experienced IAM RBAC Business Solutions Lead to establish, own, and lead our enterprise‑wide Role‑Based Access Control (RBAC) function.

This role is specifically focused on someone who has personally owned an RBAC capability and/or has successfully deployed RBAC in an organization or environment where no formal RBAC framework previously existed.

You will be responsible for defining the strategy, building the operating model, leading implementation, and embedding RBAC as a sustainable enterprise capability. You will work across IAM, Cybersecurity, HR, Technology, and business teams to improve access governance, strengthen security, and make access management more efficient and scalable.

Experience working with one or more leading identity governance platforms is essential, including SailPoint IdentityIQ, SailPoint Identity Security Cloud, Oracle Identity Manager (OIM), or Saviynt.

What can you expect:

• A highly visible global leadership role with responsibility for owning and developing the enterprise RBAC function.
• The opportunity to build and mature an RBAC capability from the ground up across a complex, global organization.
• The chance to define how roles are designed, approved, governed, implemented, reviewed, and retired.
• A strategic role with accountability for the RBAC roadmap, operating model, standards, governance, and delivery outcomes.
• The opportunity to work with business, technology, IAM, security, HR, and risk stakeholders across multiple regions and functions.
• The chance to use automation, analytics, and AI to improve role management, access reviews, provisioning, and operational performance.
• A role that combines strategic leadership, stakeholder influence, and hands‑on delivery in a complex global environment.

We will count on you to:

• Own the enterprise RBAC function, including its strategy, roadmap, operating model, governance, standards, processes, and performance.
• Lead the deployment of RBAC where no formal RBAC capability previously existed, creating the framework, processes, role ownership model, governance structure, and implementation approach.
• Establish RBAC as a sustainable enterprise capability across multiple business units, functions, applications, and regions.
• Define and deliver the RBAC strategy, maturity roadmap, standards, controls, and target operating model.
• Build strong partnerships with business, technology, IAM, security, HR, risk, and compliance stakeholders.
• Establish clear ownership and accountability for business roles, technical roles, applications, entitlements, and access decisions.
• Lead role discovery, role mining, role design, rationalization, approval, implementation, certification, and ongoing lifecycle management.
• Work hands‑on with one or more identity governance platforms, including: SailPoint IdentityIQSailPoint Identity Security CloudOracle Identity Manager (OIM)Saviynt
• Oversee the configuration, implementation, integration, and ongoing use of the relevant identity governance platform or platforms.
• Translate complex business and technical requirements into practical, scalable RBAC and access governance solutions.
• Improve service quality by reducing provisioning delays, access errors, unnecessary manual activity, policy exceptions, and operational risk.
• Monitor RBAC performance using dashboards, KPIs, KRIs, service measures, and management reporting.
• Drive continuous improvement through maturity assessments, industry practices, automation, data analysis, and operational enhancements.
• Embed RBAC into the SDLC, change management, compliance, implementation, and post‑production support processes.
• Lead and develop a regional team of employees and consultants while coordinating delivery across multiple stakeholders and workstreams.

What you need to have:

• Demonstrable experience owning an RBAC function or enterprise RBAC capability, with accountability for its strategy, operating model, governance, delivery, and ongoing performance.
• Proven experience deploying RBAC in an organization, business unit, or environment where no formal RBAC framework previously existed.
• Hands‑on experience working with one or more of the following identity governance platforms:SailPoint IdentityIQSailPoint Identity Security CloudOracle Identity Manager (OIM)Saviynt
• 5+ years of experience leading enterprise RBAC, IAM, identity governance, or access transformation initiatives.
• Practical expertise in RBAC, identity governance, provisioning, authorization, access reviews, entitlement management, and access lifecycle management.
• Experience creating role models, defining role ownership, establishing governance processes, and embedding RBAC into day‑to‑day operations.
• Experience translating complex business and technical requirements into clear, scalable role and access models.
• Proven ability to lead through influence, manage senior stakeholders, and build alignment across global teams.
• Strong communication and presentation skills, with