Information Security Specialist (RBAC & SOD)

Pyramid Consulting, Inc; Toronto; Hybrid; CAD 59,000 - 84,000; Full time

Job summary

Pyramid Consulting, Inc. in Toronto is seeking an Information Security Specialist (RBAC & SOD) for a 06+ months contract with long-term potential. The role is hybrid in Toronto, ON and involves strengthening access management programs.

You will work with internal clients and technology teams to define SOD policies, implement automated IAM controls, and deliver risk reporting using dashboards and SailPoint.

Qualifications

• 5-7 years of IAM and access governance experience.
• Strong communication with senior leadership.
• Background in regulatory compliance frameworks.
• Experience implementing technology controls for IAM risk.
• Deep knowledge of IAM principles and risk policies.
• Experience with enterprise IAM and reporting tools.
• Proven ability to deliver complex IAM projects.

Responsibilities

• Improve and optimize access management framework and SOD policies.
• Design and implement automated access controls for IAM risk.
• Collaborate with stakeholders to document policy requirements.
• Support governance programs and incident response within IAM space.
• Develop technology risk reporting with dashboards and metrics.
• Apply enterprise frameworks and Agile practices to security work.
• Engage with vendors and internal teams to address control gaps.

Skills

IAM principles

Access governance

Regulatory knowledge

Stakeholder communication

Tools

SailPoint

Excel

Power BI

SharePoint

Confluence

Teams

Job description

Immediate need for a talented Information Security Specialist (RBAC & SOD). This is a 06+months contract opportunity with long-term potential and is located in Toronto, ON(Hybrid).

Job ID: 26-32899

Pay Range: CAD -52/hour.

Key Responsibilities:

• Seeking an experienced Identity and Access Management specialist to enhance and optimize the organization's access management framework.
• The successful candidate will work with internal clients and technology teams to identify and define SOD policies and design and implement automated solutions to streamline access management processes.
• The ideal candidate will bring extensive expertise in implementing and automating segregation of duties policies and role-based security controls in complex enterprise environments.
• Contribute to SOD Policy creation and maintenance for assigned business applications, articulate and document Segregation of Duties policy requirements in collaboration with application subject matter experts.
• Guide stakeholders within defined parameters related to specific Technology Controls and Information Security programs, policies, standards, and incidents.
• Support development of technology risk reporting, monitoring key trends and defining metrics to measure control effectiveness for your own area.
• Support technology processes, help launch governance practices to monitor, detect, prevent, and react to current and emerging security threats, specifically within the Workforce Identity and Access Management space.
• Facilitate the Emerging Tech program working with various stakeholders including third party vendors, executives and various internal teams.
• Be a subject matter expert in Technology Risk related policies, procedures, technology control standards and regulatory guidelines.
• Apply a teamwork philosophy with technology and partners, service, or platform owners to integrate all technology security components and address control gaps.
• Follow and promote relevant enterprise frameworks and methodologies (Agile methodologies including the Next Evolution of Work)
• Research and investigate regulatory compliance requirements, reporting and questions, support the team in resolving compliance, audit, and regulatory issues.
• Adhere to policies, procedures, technology control standards and regulatory guidelines.
• Contribute to internal activity and process review, flag windows for improvement.
• Follow relevant enterprise frameworks and methodologies.
• Influence behavior to reduce risk, foster a strong technology risk management culture.
• Assess, identify, and
• Contribute to definition of role management and separation of duties business framework and capabilities that align with our access management control standards.
• Interpret internal/external business issues and recommend best practices pertaining to SOD Policies.
• Deliver business services, functions and capabilities that optimize the use of process, technology, and our people, and take advantage of scale and operating model.

Key Requirements and Technology Experience:

• 5-7 years of relevant experience.
• Ability to communicate effectively at all levels of the organization with an emphasis on senior leadership.
• Strong background in access governance and compliance frameworks.
• Experience implementing technology controls to address IAM related risks.
• Deep knowledge of Technology Risks and Controls as well as Risk treatment policies and procedures.
• Deep understanding of Identity and Access Management (IAM) principles.
• Demonstrated ability to succeed in projects of moderate to high complexity.
• Sound knowledge of Microsoft Excel, PowerPoint, SharePoint, Teams, Confluence and Power BI with an enhanced focus on automated reporting and dashboards.
• Experience with enterprise-level IAM platforms and tools including SailPoint.
• Providing complex IAM reporting, analysis, and assessments.

Our client is a leading IT Industry, and we are currently interviewing to fill this and other similar contract positions.

Pyramid Consulting, Inc. provides equal employment opportunities to all employees and applicants for employment and prohibits discrimination and harassment of any type without regard to race, color, religion, age, sex, national origin, disability status, genetics, protected veteran status, sexual orientation, gender identity or expression, or any other characteristic protected by federal, state or local laws.