IDENTITY & ACCESS MANAGER - HYBRID

RiseMe; Toronto; On-site; CAD 104,000 - 142,000; Full time

Job summary

GreenShield is seeking a seasoned IAM leader to drive the Identity and Access Management program. You will oversee strategy, operations, and technical implementations, aligning IAM initiatives with enterprise goals.

You will lead an IAM team, collaborate with security and IT, and ensure compliance and governance across cloud and on-premises environments. The role requires strong leadership, deep IAM knowledge (Saviynt/SailPoint/Okta/Auth0/Microsoft Azure AD/OIM), and experience with cloud IAM

Qualifications

• Bachelor's degree or diploma in cybersecurity, IT management, technology, computer science.

Responsibilities

• Develop and execute a 3-year IAM strategy.

Skills

IAM leadership

IAM strategy

Cloud IAM (Azure, GCP, AWS)

Identity and Access Management

SailPoint

Saviynt

Okta

Auth0

Microsoft Azure AD

OIM

Education

Bachelor's degree or diploma in cybersecurity/IT

Tools

Saviynt

SailPoint

Okta

Auth0

Microsoft Azure AD

OIM

Azure

GCP

AWS

Job description

WHO WE ARE

GreenShield is a proudly Canadian, national non-profit health care and insurance organization, driven by our mission of Better Health for All.We believe health care is a right, not a privilege, and we are committed to improving health outcomes, advancing health equity, and building a future where every Canadian can reach their full health and well-being potential.

THE ROLE IN A NUTSHELL

Base Salary: CAD $104,406.00 - 142,069.00

Lead and manage the Identity and Access Management (IAM) team to ensure secure and efficient operations. Oversee IAM strategy, operations, technical implementations, and align IAM initiatives with enterprise goals.

Responsibilities

• Responsible for developing and executing a 3-year IAM strategy.
• Provide IAM related project support through direct participation and collaboration with all Security and IT teams as appropriate.
• Work with all business units to regularly develop, review, and integrate business roles with access groups and permissions in applications.
• Provide regular operational and trending reports on tickets and recommendations.
• Ability to leverage existing ITSM system to manage requests efficiently with the team
• Perform root cause analysis and recommendations for process and IAM technology improvement, ensuring documentation of team processes and procedures
• Responsible for IAM-related escalations and resolutions (onboarding, offboarding, access requests).
• Working with manager and CISO to align IAM strategy to enterprise strategy.
• Strong working knowledge with IAM technologies (Saviynt, SailPoint, Okta, Auth0, Microsoft Azure AD, OIM).
• Experience with cloud IAM solutions (Azure, GCP, AWS)
• Enforce IAM policies and compliance with regulatory requirements.
• Adherence to IAM best practices, including segregation of duties, least privilege, functional ID management, privileged account management, and provisioning.
• Support Information Security Governance team in regular access reviews and audits.
• Strong written and verbal communication skills.
• Develop and present IAM and information security status to senior management.
• Responsible for adherence and management of IAM related OKRs and SLAs.
• Responsible for monitoring, managing, and forecasting resource load vs capacity.
• Train and mentor IAM team members. Provide regular coaching via ad-hoc engagements and established one-to-ones. Develop suitable succession plans.
• Collaborate with IT and security teams to ensure seamless integration of IAM solutions with user experience as a focus.
• Support IAM tool lifecycle (procurement, testing, implementation, licensing)

WHO WE'RE LOOKING FOR

• Bachelor's degree or diploma in cybersecurity, IT management, technology, computer science.
• Preferred certifications: CISSP, CISA, CISM, CIAM.
• Experience with IAM technologies (Saviynt, SailPoint, Okta, Auth0, Microsoft Azure AD, OIM).
• Strong leadership and management skills.
• Knowledge of industry regulatory and compliance requirements (OSFI, PCI, ISO27001, SOC2, NIST-CSF, CSA)
• Strong technical background in Microsoft Active Directory, File and Operating Systems
• Excellent communication and presentation skills.
• Ability to perform root cause analysis and provide recommendations.
• Experience in developing and executing IAM strategies.

NICE TO HAVE

• Knowledge of scripting languages (Python, PowerShell).
• Familiarity with Zero Trust architecture.
• Security Operations and Security Governance background.
• Prior management experience with an information technology access provisioning team.
• Understanding of web proxy technologies (ZScaler)
• Folder Access monitoring and provisioning tools (Quest)

THE CULTURE

We believe a career should be meaningful. Not just a means to earn a living. Our culture is one where everyone's voice is heard and valued. Because that’s what it takes to create better health for all. We dare to challenge the status quo. And we’re driven by people who have challenged theirs. We believe that your workplace should empower you to be the best version of yourself. That’s why we provide a place where you can be inspired, challenged, and rewarded.
Where your growth means our growth.
Where your voice is heard and valued.
Where your work has purpose. And purpose matters.
We believe our people are critical to our overall success. Inclusivity makes us a stronger, smarter and more informed organization. Being intentionally inclusive of diverse backgrounds, perspectives and experiences will enhance our company culture to positively impact how we support our communities. A career at GreenShield isn’t just about personal achievements, it's about making adifference together.
Here’s to Better Health for All!

A FEW MORE DETAILS

Proficiency in English is required for this position. As part of this role, you will be required to communicate with colleagues or customers who use English as their primary language. By requiring English proficiency for this position, we aim to ensure that our employees can excel in their roles, collaborate, and communicate effectively, and contribute to the success of our organization.

GS supports diversity, equity and inclusion in our teams and communities, and we value the unique contributions made by all. Even if your experience doesn’t align perfectly to every requirement, we invite you to apply. We encourage applications from all candidates and will accommodate needs under human rights legislation throughout all stages of the recruitment and selection process. Please let us know of any accommodation through [e-mail]. Information received relating to accommodation will be addressed confidentially.

Providing this information gives GS consent to use your personal information to assess your suitability for specific positions, future opportunities or for your personnel file. Your résumé will be held in strict confidence and will be viewed only by the Organization. Information may be stored outside of Canada and could be used for aggregate statistical purposes (which uses no personal identification).

AI Usage - GreenShield leverages AI to help produce Job Descriptions, and ideate on interview questions. We also leverage AI for interview transcription support.