MANAGER, IDENTITY & ACCESS MANAGER - HYBRID

Green Shield Canada (GSC); Toronto; Hybrid; CAD 104,000 - 142,000; Full time

Job summary

GreenShield is seeking a senior IAM leader in Toronto to guide and grow the Identity and Access Management program. You will oversee a cross-functional team, shape a multi-year IAM strategy, and ensure secure access controls across cloud and on-prem environments for a national health care and insurance organization.

You will work with CISO and IT leadership to enforce best practices, governance, and regulatory compliance while mentoring staff and driving efficiency in identity provisioning,

Qualifications

• Bachelor's degree or diploma in cybersecurity/IT management or related field.
• Strong leadership and IAM strategy experience.
• Knowledge of regulatory and compliance requirements (OSFI, PCI, ISO27001, SOC2, NIST-CSF).
• Experience with IAM technologies (Saviynt, SailPoint, Okta, Auth0, Azure AD, OIM).

Responsibilities

• Lead and manage the IAM team to ensure secure and efficient operations.
• Develop and execute a 3-year IAM strategy.
• Collaborate with security and IT teams across the organization.
• Produce regular operational and trend reports on tickets and approvals.
• Align IAM initiatives with enterprise goals and governance requirements.
• Mentor and coach team members and manage resource load and capacity.

Skills

IAM expertise

Leadership

Security governance

Microsoft Azure AD

Cloud IAM

Communication skills

Regulatory compliance

Python

Education

Bachelor's degree in cybersecurity/IT

Tools

Saviynt

SailPoint

Okta

Auth0

Microsoft Azure AD

OIM

Job description

WHO WE ARE

GreenShieldis a proudly Canadian, national non-profit health care and insuranceorganization, driven by our mission of Better Health for All.We believe health care is aright, not a privilege, and we are committed to improving health outcomes,advancing health equity, and building a future where every Canadian can reachtheir full health and well-being potential.

Throughour unique integrated payer-provider ("payvider") model, we offerinsurance, administer benefits, and pay claims as a ‘payer’ while offeringhealth care services such as mental health, pharmacy, telemedicine, and chronicdisease management as a ‘provider’. As a non-profit social enterprise without shareholders, we reinvest our excessearnings to directly support underserved communities. Through GreenShieldCares, we positively impacted the health and well-being of over one millionCanadians between 2020 and 2025. What’s driving us now is the commitment to measurably impact an additionalthree million Canadians by 2030 – across mental health, essential medicines,and chronic disease management – through scalable initiatives that delivermeaningful change in pursuit of our mission of Better Health for All.

AtGreenShield, our culture is where purpose meets passion and performance. Our teams work as one to delivermeaningful, measurable impact for the people and communities we serve.

THEROLE IN A NUTSHELL

Base Salary: CAD $104,406.00 - 142,069.00

Lead and manage the Identity and Access Management (IAM) team to ensure secure and efficient operations. Oversee IAM strategy, operations, technical implementations, and align IAM initiatives with enterprise goals.

Responsibilities:

• Responsible for developing and executing a 3-year IAM strategy.
• Provide IAM related project support through direct participation and collaboration with all Security and IT teams as appropriate.
• Work with all business units to regularly develop, review, and integrate business roles with access groups and permissions in applications.
• Provide regular operational and trending reports on tickets and recommendations.
• Ability to leverage existing ITSM system to manage requests efficiently with the team
• Perform root cause analysis and recommendations for process and IAM technology improvement, ensuring documentation of team processes and procedures
• Responsible for IAM-related escalations and resolutions (onboarding, offboarding, access requests).
• Working with manager and CISO to align IAM strategy to enterprise strategy.
• Strong working knowledge with IAM technologies (Saviynt, SailPoint, Okta, Auth0, Microsoft Azure AD, OIM).
• Experience with cloud IAM solutions (Azure, GCP, AWS)
• Enforce IAM policies and compliance with regulatory requirements.
• Adherence to IAM best practices, including segregation of duties, least privilege, functional ID management, privileged account management, and provisioning.
• Support Information Security Governance team in regular access reviews and audits.
• Strong written and verbal communication skills.
• Develop and present IAM and information security status to senior management.
• Responsible for adherence and management of IAM related OKRs and SLAs.
• Responsible for monitoring, managing, and forecasting resource load vs capacity.
• Train and mentor IAM team members. Provide regular coaching via ad-hoc engagements and established one-to-ones. Develop suitable succession plans.
• Collaborate with IT and security teams to ensure seamless integration of IAM solutions with user experience as a focus.
• Support IAM tool lifecycle (procurement, testing, implementation, licensing)

WHO WE'RE LOOKING FOR

• Bachelor's degree or diploma in cybersecurity, IT management, technology, computer science.
• Preferred certifications: CISSP, CISA, CISM, CIAM.
• Experience with IAM technologies (Saviynt, SailPoint, Okta, Auth0, Microsoft Azure AD, OIM).
• Strong leadership and management skills.
• Knowledge of industry regulatory and compliance requirements (OSFI, PCI, ISO27001, SOC2, NIST-CSF, CSA)
• Strong technical background in Microsoft Active Directory, File and Operating Systems
• Excellent communication and presentation skills.
• Ability to perform root cause analysis and provide recommendations.
• Experience in developing and executing IAM strategies.

NICE TO HAVE

• Knowledge of scripting languages (Python, PowerShell).
• Familiarity with Zero Trust architecture.
• Security Operations and Security Governance background.
• Prior management experience with an information technology access provisioning team.
• Understanding of web proxy technologies (ZScaler)
• Folder Access monitoring and provisioning tools (Quest)

THE CULTURE
We believe a career should be meaningful. Not just a means to earn a living. Our culture is one where everyone's voice is heard andvalued. Because that’s what it takeso create better health for all. We dare to challenge the status quo. And we’redriven by people who have challenged theirs. We believe that your workplace should empower you to be the best version of yourself. That’s why we provide aplace where you can be inspired, challenged, and rewarded.
Where your growth means our growth.
Where your voice is heard and valued.
Where your work has purpose. And purpose matters.
We believe our people arecritical to our overall success. Inclusivity makes us a stronger, smarter andmore informed organization. Being intentionally inclusive of diversebackgrounds, perspectives and experiences will enhance our company culture topositively impact how we support our communities. A career at GreenShield isn’t just about personalachievements, it's about making adifference together.
Here’s to Better Health for All!

AFEW MORE DETAILS
Proficiency in English is requiredfor this position. As part of this role, you will be required to communicatewith colleagues or customers who use English as their primary language. By requiring English proficiency for thisposition, we aim to ensure that our employees can excel in their roles,collaborate, and communicate effectively, and contribute to the success of ourorganization.

GS supports diversity, equity andinclusion in our teams and communities, and we value the unique contributionsmade by all. Even if your experience doesn’t align perfectly to everyrequirement, we invite you to apply. We encourage applications fromall candidates and will accommodate needs under human rights legislationthroughout all stages of the recruitment and selection process. Please let usknow of any accommodation through [e-mail]. Information received relating toaccommodation will be addressed confidentially.

Providing this information givesGS consent to use your personal information to assess your suitability forspecific positions, future opportunities or for your personnel file. Yourrésumé will be held in strict confidence and will be viewed only by theOrganization. Information may be stored outside of Canada and could be used foraggregate statistical purposes (which uses no personal identification).

AI Usage - GreenShield leverages AI to help produce Job Descriptions, and ideate on interview questions. We also leverage AI for interview transcription support.