Information Security Specialist

Nityo Infotech; Toronto; Hybrid; CAD 90,000 - 140,000; Full time

Job summary

Nityo Infotech Limited is seeking an Information Security Specialist (SoD) to drive policy development for IAM/RBAC audit remediation. The role is client-facing, onshore, with regular collaboration during Eastern Time business hours. Canadian candidates are preferred; location may be flexible if working hours are met.

Experience in SoD design, IAM governance, and SailPoint IdentityIQ is highly valued. This long-term engagement requires strong business analysis and stakeholder engagement across

Qualifications

• Hands-on experience designing SoD policies, rules, matrices and controls.
• Strong business analysis with stakeholder interviews and workshops.
• Knowledge of IAM, Identity Governance, RBAC and entitlements.
• SOX or regulated financial-services environment preferred.

Responsibilities

• Lead discovery with business stakeholders, application owners, provisioning IAM teams and technology owners.
• Identify SoD conflicts and toxic access combinations across processes and roles.
• Elicit, analyze, reconcile and document requirements with precise policy rules.
• Translate risks into implementation-ready SoD policies and matrices for IAM tooling.
• Support policy review, testing, audit evidence and remediation activities.

Skills

SoD policy design

IAM

RBAC

Stakeholder collaboration

Risk assessment

Audit remediation

Tools

SailPoint IdentityIQ

Job description

Role Title: Information Security Specialist (Segregation of Duties)

Location – 3-4 days to office, downtown Toronto

Duration - Long Term

Job Description:

Information Security Specialist

IAM RBAC & Segregation of Duties (SoD)

SUMMARY Senior security analyst needed to develop stakeholder-driven SoD policies for IAM/RBAC audit remediation. Strong SoD expertise and business analysis skills are essential; SailPoint IdentityIQ experience is preferred. Must work Eastern Time hours.

Engagement

Support a critical Workforce IAM audit-remediation initiative by developing approximately 100+ business-driven SoD policies. The role is onshore, stakeholder-facing, and requires regular collaboration during Eastern Time business hours. Canadian candidates are preferred; location may be flexible if working-hour requirements are met.

Primary Responsibilities

Lead discovery with business stakeholders, application owners, provisioning teams, IAM teams, and technology owners.

Identify SoD conflicts and toxic access combinations across business processes, roles, and entitlements.

Elicit, analyze, challenge, reconcile, and document requirements; do not rely on stakeholders to provide complete technical rules.

Translate business risks and control requirements into precise SoD policies and implementation-ready matrices for Access Management Hub.

Support policy review, validation, testing, refinement, audit evidence, violation management, and remediation activities.

Required Experience

Hands-on experience designing and developing SoD policies, rules, matrices, and controls. Not just experience limited to loading or configuring pre-defined policies.

Strong business analysis skills: stakeholder interviews, workshops, requirements elicitation, business-process analysis, conflict resolution, and clear policy documentation.

Knowledge of IAM, Identity Governance, RBAC, role/entitlement, provisioning, access-risk, and policy-violation knowledge.

Understanding of audit remediation, internal controls, information-security risk, compliance, and preferably SOX or regulated financial-services environments.

Ability to communicate effectively with business, security, audit, IAM, and engineering stakeholders.

Technology & Candidate Profile

Preferred: SailPoint IdentityIQ, including Role SoD and Entitlement SoD concepts. SailPoint is an enabling technology, not the primary selection criterion.

Target profiles: Senior SoD/IAM Business Analyst, Identity Governance/SoD Analyst, IAM Information Security Analyst, RBAC/SoD Specialist, IAM Controls/Access Risk Analyst, or stakeholder-facing SoD Consultant