Information Security Specialist – (RBAC & SoD)

Cognizant; Toronto; On-site; CAD 106,000 - 124,000; Full time

Benefits offered by this job

Medical/Dental/Vision/Life Insurance

Paid holidays + Paid Time Off

Long-term/Short-term Disability

Paid Parental Leave

Job summary

Cognizant is seeking an Information Security Specialist to strengthen Workforce Identity and Access Management (WIAM) governance. The role focuses on RBAC and SoD across enterprise applications, partnering with business and technology teams to document requirements and implement controls.

Responsibilities include risk assessments, dashboards, audits support, and remediation strategies. Ideal candidates bring IAM experience, governance know-how, and familiarity with leading IAM platforms.

Qualifications

• 5–7 years of IAM, information security, technology risk, or access governance roles.
• Strong RBAC, SoD, access governance, entitlements management, identity lifecycle management, and compliance controls knowledge.
• Experience implementing governance processes to address IAM risks.
• Familiarity with enterprise IAM platforms (SailPoint, Saviynt, CyberArk, Okta, Entra ID).
• Experience supporting regulatory, compliance, audit, and risk management programs.
• Strong knowledge of technology risk management frameworks, standards, and risk treatment methodologies.
• Experience developing dashboards/metrics using Power BI, Excel, SharePoint.
• Excellent communication and stakeholder management, ability to engage senior leaders.
• Experience in Agile environments and enterprise governance frameworks.
• Certifications such as CISSP, CISM, CRISC, Security+ preferred.

Responsibilities

• Develop SoD policies and controls across enterprise applications and platforms.
• Partner with owners and stakeholders to document SoD requirements and access governance controls.
• Support RBAC framework design, role management, and access governance processes.
• Conduct IAM risk assessments, identify gaps, and recommend remediation strategies.
• Create and maintain dashboards, KPIs, and risk reporting for IAM governance.
• Support audits, regulatory reviews, and evidence collection for IAM controls.
• Provide guidance on IAM governance, technology risks, and regulatory requirements.
• Collaborate with security, risk, audit, and technology teams to address IAM risks.
• Facilitate governance activities, risk reviews, and stakeholder workshops.
• Contribute to process improvements and automation in IAM governance.

Skills

RBAC

SoD

access governance

entitlements management

identity lifecycle

compliance controls

Power BI

Excel

SharePoint

stakeholder mgmt

Tools

SailPoint

Saviynt

CyberArk

Okta

Microsoft Entra ID

Job description

Practice - CIS - Cloud, Infrastructure, and Security Services

About Cloud Infrastructure & Security Services: Cognizant’s Cloud, Infrastructure, and Security Services Practice (CIS), is all about embracing digital transformation by driving core modernization holistically across layers. We help customers transform infrastructure and workplace to meet the rapidly evolving needs of the digital era. Our holistic approach delivers key results for our customers by achieving cloud driven modernization and workplace and operational transformation to run the business in a secure environment.

Job Summary

We are seeking an Information Security Specialist to support the Workforce Identity and Access Management (WIAM) team with a focus on Role-Based Access Control (RBAC) and Segregation of Duties (SoD) governance. This role will be responsible for enhancing the organization’s IAM security posture through the design, implementation, and maintenance of access governance controls, SoD policies, and risk management processes. The ideal candidate will possess strong experience in IAM governance, compliance, access controls, and risk reporting, along with the ability to partner effectively with business, technology, audit, and security stakeholders.

In this role, you will:

• Develop, maintain, and enhance Segregation of Duties (SoD) policies and controls across enterprise applications and technology platforms.


• Partner with application owners, business stakeholders, and technology teams to identify, analyze, and document SoD requirements and access governance controls.


• Support the design and implementation of Role-Based Access Control (RBAC) frameworks, role management capabilities, and access governance processes.


• Conduct IAM risk assessments, identify control gaps, and recommend remediation strategies to improve Workforce IAM security controls.


• Develop and maintain reporting, dashboards, KPIs, and metrics to measure the effectiveness of IAM governance and compliance controls.


• Support audits, regulatory reviews, compliance assessments, evidence collection, and remediation activities related to IAM controls.


• Provide guidance and subject matter expertise on IAM governance, technology risks, control frameworks, and regulatory requirements.


• Collaborate with security, risk, audit, and technology teams to monitor, detect, and address emerging IAM-related risks and vulnerabilities.


• Facilitate governance activities, stakeholder workshops, risk reviews, and working sessions to drive control adoption and maturity.


• Contribute to process improvements, operational efficiencies, and automation initiatives within the IAM governance domain.

What you need to have to be considered

• 5–7 years of experience in Identity and Access Management (IAM), Information Security, Technology Risk, or Access Governance roles.


• Strong understanding of IAM principles including RBAC, SoD, access governance, entitlements management, identity lifecycle management, and compliance controls.


• Experience implementing technology controls and governance processes to address IAM-related risks.


• Familiarity with enterprise IAM platforms such as SailPoint, Saviynt, CyberArk, Okta, Microsoft Entra ID, or similar solutions.


• Experience supporting regulatory, compliance, audit, and risk management programs.


• Strong knowledge of technology risk management frameworks, control standards, and risk treatment methodologies.


• Experience developing dashboards, metrics, automated reporting, and risk analytics using tools such as Power BI, Excel, SharePoint, and related platforms.


• Strong communication and stakeholder management skills with the ability to engage senior leadership and business partners.


• Experience working in Agile delivery environments and enterprise governance frameworks.


• Professional certifications such as CISSP, CISM, CRISC, Security+, or IAM-related certifications are preferred.

Applications will be accepted until 23 Oct 2026.

Salary and Other Compensation:

The annual salary for this position is between $[105,500 - 124,000] depending on experience and other qualifications of the successful candidate.

This position is also eligible for Cognizant’s discretionary annual incentive program, based on performance and subject to the terms of Cognizant’s applicable plans.

Benefits:

• Medical/Dental/Vision/Life Insurance


• Paid holidays plus Paid Time Off


• Long-term/Short-term Disability


• Paid Parental Leave

Cognizant is an equal opportunity employer. All qualified applicants will receive consideration for employment without regard to sex, gender identity, sexual orientation, race, color, religion, national origin, disability, protected Veteran status, age, or any other characteristic protected by law.