RQ00401 BA Access Management I SNB I 2+2 Years I Remote

Analyst Technical Solutions; Toronto; A distancia; CAD 138.000 - 165.000; Jornada completa

Descripción de la vacante

Service New Brunswick is seeking a CIS Access Management Specialist to design and operationalize IAM/RBAC for the provincial CIS. You will lead current-state assessments, stakeholder workshops, and governance planning to ensure secure, auditable access models across clinical and operations teams.

The role requires collaboration with privacy, cybersecurity, HR, and CIS teams, plus strong experience in RBAC, data analysis, and process documentation.

Formación

• Bachelor’s degree in Computer Science, Business Administration, Health Informatics, or equivalent.
• 5+ years of business analysis experience in healthcare or enterprise tech initiatives.
• 3+ years of IAM/RBAC experience and working with clinical stakeholders.

Responsabilidades

• Access Management and RBAC: develop RBAC framework and role catalogues.
• Business Analysis: conduct discovery, interviews, and requirements documentation.
• Governance and Readiness: support governance processes and change readiness.
• Data Analysis and Validation: analyze user populations and access models.
• CIS Access Configuration Support: translate role designs into CIS configuration requirements.

Conocimientos

Business analysis

Requirements gathering

Workshop facilitation

Process mapping

Stakeholder engagement

Educación

Bachelor’s degree or equivalent

Herramientas

Microsoft Office

Visio

Teams

Descripción del empleo

RQ00401 BA Access Management

Service New Brunswick

2 years Contract + 2 Years Extensions

100-120/hr incorp

Remote

Background

New Brunswick is moving from multiple standalone clinical systems to a single provincial Clinical Information System (CIS). To support this transformation, the CIS Configuration and Access Management stream is responsible for establishing and operationalizing the configuration, role design, access management, and governance capabilities required to support the new CIS.

This work includes understanding current-state workflows and access models, defining future-state configuration and role structures, developing governance and operational processes, identifying gaps and risks, and coordinating implementation activities across partner organizations. Success requires close collaboration with clinical, operational, privacy, technical, cybersecurity, and enterprise service teams to ensure a secure, sustainable, and clinically effective CIS environment.

Services Sought

Service New Brunswick (SNB) requires a CIS Access Management Specialist to support the development, implementation, and operational readiness of the Identity and Access Management (IAM) and Role-Based Access Control (RBAC) framework for the provincial Clinical Information System (CIS).

The resource will work with clinical, operational, privacy, cybersecurity, IAM, human resources, and technical teams to define access requirements, document business processes, develop role catalogues, support governance decisions, and coordinate activities required to establish a secure, auditable, and operationally sustainable access management model for the CIS.

The successful candidate will lead current-state assessments, future-state design activities, stakeholder engagement, requirements analysis, role engineering workshops, governance processes, and operational readiness planning to ensure the CIS access model supports clinical workflows, privacy obligations, patient safety, and organizational policies

Key responsibilities include:

• Access Management and RBAC:
  • Assist in the development of the CIS access management strategy and RBAC framework.
  • Facilitate identification, analysis, and validation of clinical, administrative, and support roles.
  • Develop and maintain role catalogues, access matrices, and role definitions.
  • Support design of least-privilege and separation-of-duties principles.
  • Define provisioning, modification, suspension, and deprovisioning requirements.
  • Support emergency access (“break glass”) process design.
  • Support access review and recertification processes.
• Business Analysis
  • Conduct current-state discovery and documentation
  • Facilitate stakeholder interviews, workshops, and decisions sessions.
  • Gather, analyze, and document business, operational, privacy, security, and compliance requirements
  • Create process maps, workflow diagrams, and future-state business processes.
  • Maintain requirements traceability and decision records.
• Governance and Readiness
  • Support development of access governance processes and operating procedures.
  • Coordinate decisions between IAM, privacy, cybersecurity, HR, clinical operations, and CIS teams.
  • Track risks, issues, dependencies, and assumptions.
  • Support change readiness and operational transition activities.
  • Develop recommendations and presentations for governance committees and project leadership.
• Data Analysis and Validation
  • Analyze user populations and existing access assignments.
  • Support role mining and role engineering activities.
  • Validate access models against organizational structures and clinical workflows.
  • Identify conflicts, overlaps, and access risks.
• CIS Access Configuration Support:
  • Support translation of approved role designs into CIS configuration requirements.
  • Assist with validation and testing of access configurations.
  • Support user acceptance testing activities related to security roles and access.
  • Coordinate access readiness activities leading to go-live.

The selected candidate will support the long-term sustainment of the Symbio Program by ensuring effective knowledge transfer and capability development among program personnel throughout the engagement. They will be expected to actively mentor and develop New Brunswick program personnel by sharing relevant skills and expertise in facilitation, processes, and documentation. This will enable program staff to independently apply the knowledge, practices, and expertise required to ensure continuity and support the ongoing success of the program.

Some after hours and weekend work may be required for the successful candidate, however, any overtime or work during non-business hours must be approved in advance.

The language of work is English, French is an asset

Mandatory Requirements

M1

A Bachelor’s level University degree in Computer Science, Business Administration, Health Informatics, or a similar discipline. An equivalent combination of education and experience may be considered.

Yes

M2

Business analysis experience including requirements gathering, workshop facilitation, use case analysis, business process analysis, detailed design activities, decision records, and developing business analysis documentation

supporting large-scale healthcare or enterprise technology initiatives

5+ years

M3

Experience working with Identity and Access Management (IAM), access governance, or Role-Based Access Control (RBAC)

3+ years

M4

Demonstrated experience working with clinical stakeholders, operational leaders, or healthcare organizations.

5+ years

M5

Proficiency with Microsoft Office products including Word, Excel, PowerPoint, Visio, and Teams

Yes

M6

Experience supporting provider-based healthcare information systems, including large-scale Clinical Information System (CIS), Electronic Medical Record (EMR), or Electronic Health Record (EHR) implementations.

3+ years

M7

Limit of 2 submissions per vendor.

Yes

Scored Requirements

S1

Demonstrated experience leading RBAC design, role engineering, or access governance initiatives in healthcare environments.

3+ years

S2

Demonstrated experience supporting implementation of large-scale Clinical Information Systems.

3+ years

S3

Demonstrated experience translating clinical workflows into access and security requirements.

3+ years

S4

Demonstrated experience developing role catalogues, access matrices, and segregation-of-duties models.

3+ years

S5

Demonstrated experience analyzing privacy legislation, access auditing or patient information protection requirements.

3+ years

S6

Demonstrated experience conducting user population analysis, role mining, or entitlement analysis activities.

2+ years

S7

Demonstrated experience presenting recommendations to executives, directors, clinical leaders, and governance committees.

2+ years

S8

Candidate has New Brunswick healthcare experience, including Horizon, Vitalité, SNB, or provincial healthcare services.

Considered Strong Asset

S9

Verbal and written communication, facilitation, and presentation skills in both French and English is strongly preferred.

Yes

Reporting Structure

The successful candidate will report to the CIS Configuration and Access Management Lead, CIS Project.

Duration/Effort

The successful candidate will be required on a full-time basis for a period of two (2) years with two (2) one-year optional renewal periods, commencing December 7th, 2026 (or earlier if possible) and ending on December 6th, 2028.

SNB reserves the right to truncate the engagement, as needed. SNB may extend the engagement with 2 optional one-year renewal periods.

Deliverables

The successful candidate must deliver the following, to successfully complete the engagement:

• Discovery and Assessment Deliverables (Current state Access, Current State process, User population analysis)

• Requirements Deliverables (Business Requirements Document [BRD], Functional Requirements, Non-Functional Requirements, Privileged Access Requirements, Requirements Traceability Matrix)

• RBAC Deliverables (Role Catalogue [Financial, Clinical, Administrative], Access Matrix, Role to Function, Break-Glass Access Model)

• Governance Deliverables (Access Governance Framework, Decision Records, Risk/Issue logs, Access request and approval workflows)

• Operational Readiness Deliverables (Provisioning and Deprovisioning, Support, Go-live readiness, transition to operations)