IT Security Analyst - 3

LanceSoft; Toronto; Hybrid; CAD 80,000 - 110,000; Full time

Job summary

A leading company in Canada's banking sector seeks a specialist in Identity and Access Management. The successful candidate will manage user access and support logical controls to enhance security within the enterprise. This is an opportunity to work collaboratively in a vital role involving various projects and initiatives in the cybersecurity realm, ideal for someone with robust experience and technical background.

Qualifications

• 5+ years experience in Identity and Access Management.
• 3-5+ years experience with Microsoft Active Directory.
• 2-3 years experience with identity management tools such as SailPoint IIQ.

Responsibilities

• Support achievement of security objectives by managing logical access.
• Address risks regarding logical access in line with bank's appetite.
• Provide support for logical access management using Active Directory.

Skills

Identity and Access Management

Microsoft Active Directory

Identity management tools

Ticket request management

Power Shell scripting

SQL

Bilingual in Spanish

Education

Diploma in Computer Science

MCSE/MCSA, CISSP, Security+

Job description

Job Description
Location Address: Hybrid - Scarborough 1 time/week may increase want candidates in GTA
Contract Duration: 1 year
Possibility of extension
Schedule Hours: 8:30am-5pm Monday-Friday (1 hour lunch); standard 37.5 hrs/week

Story Behind the Need
Business group: Cybersecurity Operations - The Identity Lifecycle Management team within the Access Management Operations is responsible for the execution of established security controls pertaining to identity and access. This includes the centralized provisioning of user identities, the user accounts linked to those identities, management of user access, privileged access, as well as the selection and integration of identity management tools.
Project: Working on various projects and initiatives which involve AD and client ID clean-ups

Candidate Value Proposition:
The successful candidate will have the opportunity to work within one of the Top 5 Banking Institutions in Canada. We are technology partners who help the business transform how our employees around the world work. You'll get to work with and learn from diverse industry leaders, who have hailed from top technology and financial institutions across the globe.

Typical Day in Role:
Responsible for supporting the achievement of the Banks information security objectives of integrity, confidentiality/privacy, availability, and continuity by:
- Ensuring logical access control is effectively implemented across the Enterprise
- Addressing logical access and risks commensurate with the Banks risk appetite
- Providing support for logical access working with MS Active Directory, LDAP, provisioning access on users local workstation, access on vFiler shares, privileged access management.
- Supporting the business to understand their responsibilities with respect to logical access controls
Continuously, provides value and consistency added to the user and customer experience by improvising workflows associated with banks onboarding and Logical Access platforms
Perform required tasks for Logical Access Control; tasks relevant to Identity & Access Management including access request, access provision/deprovision, communication, and documentation of operational processes and procedures, etc.
Process Add/remove/change activities, and provide support on access issues for:
ScotiaID, Windows ID (Active Directory) and Exchange/Notes mailbox requests
Help manage AD Security Groups, Distribution Groups, Group Mailboxes access management; Service Accounts
Utilize troubleshooting skills to understand moderately complex systems/issues related to user Identity and access, and potential root causes
Liaise with 2nd and 3rd level support when required
Provide reports and data, as requested, for audits and walkthroughs of internal controls IAMOPS ILM owned processes

Candidate Requirements/Must Have Skills:
1) 5+ years experience in Identity and Access Management
2) 3-5+ years experience with Microsoft Active Directory (AD) on-prem managing users and groups
3) 2-3 years experience with identity management tools such as SailPoint IIQ or similar
4) 2-3 years experience with ticket request management systems, preferably with ServiceNow

Nice-To-Have Skills:
1) Experience with privileged access management systems
2) Power Shell scripting skills for AD administration tasks
3) Experience with SQL/Oracle queries
4) Bilingual in Spanish would be an asset
5) Experience within FI/banking

Soft Skills Required:
Excellent communication skills in English (verbal + written)
Customer-service oriented
Strong time management and organizational skills

Education:
Diploma in Computer Science or equivalent technical experience
Technical and Security Designation is an asset (MCSE\MCSA, CISSP, Security+)

Best VS. Average Candidate:
On top of having all the requirements, ideal candidate has MCSE or MCSA certifications for AD, is enthusiastic, willing to learn and share knowledge and is a strong team player.

Candidate Review & Selection
1 round with HM and 1-2 more managers 45 minutes- 1 hour MS Teams Video Interviews

About the company

Established in 2000, LanceSoft is a Certified MBE and Woman-Owned organization, and a pioneer in providing premium end-to-end Global Workforce Solutions and IT Services to diverse clients across various domains.

Notice

Talentify is an Equal Opportunity Employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, sexual orientation, gender identity, national origin, disability, or protected veteran status.

Talentify provides reasonable accommodations to qualified applicants with disabilities, including disabled veterans. Request assistance at [e-mail] or 407-000-0000.

Federal law requires every new hire to complete Form I-9 and present proof of identity and U.S. work eligibility.

An Automated Employment Decision Tool (AEDT) will score your job-related skills and responses. Bias-audit & data-use details: www.talentify.io/bias-audit-report . NYC applicants may request an alternative process or accommodation at [e-mail] or 407-000-0000.