Identity Governance Analyst - Corporate Services

Graham; Calgary; Hybrid; CAD 85,000 - 125,000; Full time

Job summary

Graham in Calgary is seeking an Identity Governance Analyst to strengthen access controls across enterprise systems. Reporting to the Identity and Compliance Manager, you will design, review, and improve governance processes and advise stakeholders on least-privilege and segregation of duties.

This role is based in our Calgary office with a hybrid schedule, and involves periodic access reviews, audits, and collaboration with Cybersecurity, IT, HR, SAP and SuccessFactors teams to ensure

Qualifications

• Bachelor's degree in IT, cybersecurity, computer science, information systems, or a related field.
• 3–7 years in information technology, cybersecurity, or IT audit with IAM exposure.
• Experience with Entra Identity Governance, SAP SuccessFactors, SAP, and IT audit is an asset.

Responsibilities

• Plan, coordinate, and execute periodic user access reviews across enterprise systems.
• Analyze user access to identify issues; validate with owners; manage remediation and audits.
• Advise stakeholders on access control, identity governance, and risk.
• Identify and remediate segregation of duties concerns with stakeholders.
• Create and maintain procedures, SOPs, and access documentation.
• Support Purview policies and related alerts; escalate as needed.
• Monitor training progress and respond to auditor questions.

Skills

Identity governance

Access management

IT security

IT audit

Windows Active Directory

Microsoft 365 / Office 365

Entra Identity Governance

ERP systems (SAP)

SAP SuccessFactors

Education

Bachelor's degree in Information Technology / Cybersecurity / Computer Science / Information Systems

Tools

Microsoft Entra Identity

SAP

SAP SuccessFactors Employee Central

Office 365

Windows Active Directory

Job description

Build What Matters

At Graham, one of North America’s largest general contractors, we don’t just build projects, we enable the systems and services that make construction possible. As part of our Corporate Services team, you’ll support impactful work across the region through expertise in HR Advisory, Communications, Supply Chain, Finance, and more.

Here, your work has purpose. Your growth is supported. And your impact is lasting.
Join a team that builds with commitment, reliability, and integrity.

Your Impact Starts Here

Graham is actively recruiting for an Identity Governance Analyst. Reporting to the Identity and Compliance Manager, the Identity Governance Analyst strengthens organizational security by designing, reviewing, and continuously improving access control processes across enterprise systems. The role advises business and technical stakeholders on access governance, least‑privilege principles, segregation of duties, and identity lifecycle processes. This position conducts periodic access reviews, supports audits, maintains documentation, assesses access‑related risks, and helps ensure access remains appropriate throughout the employee lifecycle while working closely with Cybersecurity, IT, Human Resources, SAP teams, SuccessFactors administrators, and business leaders.

This role is based in our Calgary office, with hybrid work schedule

Your Role in Building What Matters - From Office to Site

• Plan, coordinate, and execute periodic user access reviews across enterprise systems, including Active Directory, Microsoft Entra ID, SAP, SuccessFactors, and M365.
• Analyze user access to identify excessive, inappropriate, orphaned, privileged, elevated, or misaligned access; validate access with business owners, system owners, and managers; manage exceptions; track remediation; and support audit or compliance follow-up.
• Advise stakeholders on access control processes, identity governance controls, proposed access models, role designs, segregation of duties concerns, and access‑related risks.
• Identify, assess, and support the remediation or mitigation of segregation of duties concerns by working with business owners, system owners, and process stakeholders to resolve access conflicts, define appropriate mitigating controls, track outcomes, and support audit or compliance requirementsRecognize when access is not aligned with established processes or procedures, elevate concerns appropriately, ask clarifying questions, anticipate business needs, and recommend practical solutions.
• Create and maintain procedures, SOPs, role ownership records, access review playbooks, role design standards, control documentation, and current‑state/future‑state process documentation.
• Identify access governance gaps, inefficiencies, and control weaknesses; recommend practical process improvements; and support the design, testing, and improvement of automated processes for access assignments, access reviews, remediation tracking, and reporting.
• Support Microsoft Purview policies, including Data Loss Prevention and Insider Risk Management; review related alerts; and elevate or track follow‑up actions as required.
• Monitor cybersecurity awareness training completion, follow up on overdue requirements, support compliance reporting, follow Cybersecurity escalation paths, respond to auditor questions, and demonstrate HSE and Quality behaviours aligned with Actively Caring and Road to Zero.

The Right Tools for the Job

• Education: Bachelor’s degree in Information Technology, Cybersecurity, Computer Science, Information Systems, or a related field.
• Experience: 3-7 years of related experience in information technology, cybersecurity, help desk, systems administration, business analysis with exposure to identity and access management, cybersecurity governance, IT compliance, IT audit, information security, ERP environments, or work involving confidential and sensitive information. Experience with Entra Identity Governance, SAP SuccessFactors, SAP, and IT audit is an asset
• Certifications: Relevant cybersecurity, identity and access management, audit, compliance, or information security certifications are assets.
• Technical Skills: Proficiency with Microsoft Office 365, Windows Active Directory account administration, Microsoft Entra Identity, ERP systems, SAP, and SAP SuccessFactors Employee Central.

At Graham, we’re building more than structures, we’re building futures. Join a team that delivers excellence from the ground up and makes a lasting impact across Canada.

We’re proud to be an Equal Opportunity Employer and are committed to an inclusive, accessible workplace. Accommodations are available throughout the hiring process when requested. Please contact [e-mail] for accommodation requests.

Unsolicited resumes or candidate profiles will not be accepted and will become the property of Jardeg/Graham.

As Graham’s trusted recruitment partner, Jardeg supports the hiring of skilled professionals across Buildings, Industrial, Infrastructure, Water, Development, and Services projects nationwide.