IT Security Analyst - 4

LanceSoft Inc; Toronto; Hybrid; CAD 90,000 - 120,000; Full time

Job summary

A leading consultancy firm is seeking a Senior Analyst for the Identity Lifecycle Management team. This role involves ensuring effective logical access control and managing user identities within the organization's security framework. With 9+ years of experience in Microsoft Active Directory management and PowerShell scripting, the ideal candidate will have strong data management skills and experience in a banking environment. This hybrid position offers both remote and in-office opportunities.

Qualifications

• 9+ years managing Users and Groups in Microsoft Active Directory.
• 3-5+ years PowerShell scripting for AD administration.
• Advanced Excel skills for data management.

Responsibilities

• Ensure logical access control across the Enterprise.
• Support risk management related to logical access.
• Work with MS Active Directory, LDAP, and privileged access management.

Skills

Microsoft Active Directory management

PowerShell scripting

Advanced Excel data management

ServiceNow

SQL/Oracle

SailPoint IIQ

CyberArk

Education

Post-secondary degree in a technical field

Tools

MS Azure

Power BI

Job description

Location Address: Hybrid (two days in the office with potential increase in the future) – Contract Duration: 9 months Start day: Jan 20th to Feb 1, 2026 Extension Opportunity: Yes Scheduled Hours: Monday to Friday, 8:30am-5pm

Story Behind the Need

The Identity Lifecycle Management team within the Access Management Operations is responsible for the execution of established security controls pertaining to identity and access. This includes the centralized provisioning of user identities, the user accounts linked to those identities, management of user access, privileged access, as well as the selection and integration of identity management tools. The Senior Analyst, Identity Lifecycle Management is responsible for supporting the achievement of the Bank’s information security objectives of integrity, confidentiality/privacy, availability, and continuity by:

• Ensuring logical access control is effectively implemented across the Enterprise.
• Addressing logical access and risks commensurate with the Bank’s risk appetite.
• Providing support for logical access working with MS Active Directory (on prem), LDAP, provisioning access on user’s local workstation, access on vFiler shares, privileged access management.
• Supporting the business to understand their responsibilities with respect to logical access controls.

Candidate Requirements / Must-Have skills

1. 9+ years of experience managing Users and Groups in on‑prem Microsoft Active Directory and LDAP
2. 3‑5+ years of experience with PowerShell scripting for AD administration tasks
3. Advanced Excel data management skills (working with big reports)
4. 2‑3+ years of experience with ServiceNow, SQL/Oracle
5. 3‑5+ years of experience with SailPoint IIQ, CyberArk (or similar) PAM solution for Privilege ID onboarding and management

Nice‑To‑Have Skills

• MS Azure and Entra ID management experience
• Previous Banking/FI experience
• Power BI experience
• Technical and Security Designation is an asset (MCSE\MCSA, CISSP, Security+)

Soft Skills

• Excellent written, presentation, and verbal communication skills to be able to work well with technical peers and business stakeholders at different levels within the organization.
• Strong decision making, forward thinking and creative problem‑solving skills to anticipate and respond quickly to technological/market influences.
• Ability to work as part of a team, as well as work independently or with minimal direction.

Best vs. Average Candidate

• The best candidate is someone with advanced AD identity management and PowerShell scripting skills
• Proactive and consistently seeks solutions for problems, has good time management skills.

Education

• Post‑secondary degree in a technical field such as computer science, computer engineering or equivalent work experience

Candidate Review & Selection

1. 1 round Panel technical Interview – remote or on‑site in person (preferred) (45 minutes)
   • Assess both technical and soft skills
   • Possibility of a second round interview