Security Business Analyst

Ian Martin Group; Calgary; On-site; CAD 55,000 - 83,000; Full time

Job summary

Ian Martin Group is recruiting a Security Business Analyst in Calgary, AB. You will bridge business analysis with a deep security foundation to ensure CIAM requirements align with controls and complex use cases.

The role emphasizes translating needs into secure, user-centric identity solutions for financial services clients. Responsibilities include translating requirements between business units and security engineers, delivering digital authentication initiatives, and analyzing access risk

Qualifications

• 3–5 years of BA experience with IAM or Digital Identity.
• Foundational knowledge of OIDC, SAML, OAuth.
• Core BPM and process improvement experience.
• Customer research and journey mapping experience.
• Stakeholder management and security-focused storytelling.

Responsibilities

• CIAM translation between business and security teams.
• Support delivery of digital authentication strategy initiatives.
• Analyze access, encryption and authentication risks.
• Standardize security product requirements and report metrics.
• Improve identity workflows without compromising security.
• Lead roadmap delivery for the client identity product.
• Collaborate with engineers and UX for the Digital Project.
• Strengthen fraud detection and identity tooling partnerships.

Skills

IAM

Business Analysis

Stakeholder Management

Security Risk Analysis

Data & Analytics

Design Thinking

Communication

Security Fundamentals

Education

Bachelor’s degree in Computer Science, Business Administration, Engineering, or related field

IIBA CS/CBAP or CCBA asset

Security certifications (e.g., CompTIA Security+) asset

Tools

Ping Identity

DIAM

Job description

Security Business Analyst

• Rate: $47.79/hour, depending on experience
• Contract End Date: Dec 31, 2026
• Location: Calgary Alberta

Raise is currently hiring a Security Business Analyst on behalf of our client. They’re expanding their team to meet growing needs, making this a unique opportunity to work with an industry leader. Our Client isa market leading financial institution

Note: The primary pay rate is based on T4 classification; however, we will also consider applications from candidates interested in an INC classification, where applicable.

Description

The Security Business Analyst, in this role will bridge the gap between traditional business analysis and a deep security foundation. Your mission is to ensure that business requirements for Client Identity and Access Management (CIAM) are aligned with stringent security controls and complex technical use cases. You will translate requirements from business stakeholders, development teams, and security experts to ensure all identity products across are both user-centric and technically sound. The Security Business Analyst is a critical thinker who understands that security is the foundation of client trust—a proactive problem-solver, comfortable navigating the nuances of authentication protocols, and skilled at ensuring a seamless, secure journey for every client. Pay

Responsibilities

• CIAM Translation: Serves as the primary translator between business units and security engineering, turning complex client identity needs into feasible, secure solutions.
• Project Delivery: Supports critical initiatives driving the delivery of the digital authentication strategy. Key initiatives include but are not limited to a Unified D2C Client Application, adoption of stronger and phishing resistant authentication, dynamic and assurance based fraud controls such as 2-way notifications, and expansion of Ping to strengthen enterprise fraud and identity tooling.
• Access Risk Analysis: Focuses on analyzing access management, encryption, and authentication practices to identify security risks within client-facing platforms (e.g., Virtual Assistant, Retail Banking).
• Standardization: Builds a standardized set of security product requirements for DIAM and produces metrics to report performance against those requirements.
• Process Enhancement: Researches and analyzes improvement opportunities within identity workflows to facilitate efficiency enhancements that don't compromise security.
• Innovate and set the vision for the Client Identity product, managing and leading the roadmap delivery at the component/phase level.
• Manage activities for the identity product through its entire lifecycle, including defining requirements and liaising with engineers and UX designers for the Digital Project.
• Support the integration and strengthening of fraud detection systems through new tools to help reduce monetary fraud losses.
• Act as an emissary of the Identity, Application and Offensive Security team working to promote strong partnerships with teams and stakeholders that are dependent on our services.

Qualifications

• 3–5 years of Business Analysis experience, with a proven focus on Identity & Access Management (IAM) or Digital Identity.
• Foundational understanding of authentication protocols (OIDC, SAML, OAuth) and data privacy regulations.
• Core Business Process Management - monitoring business processes and improving them over time.
• Customer Research & Journey Mapping - Planning, leading, and conducting user research and usability studies.
• Strategic Planning - Documenting and establishing direction of a vision and roadmap for a product.
• Identity Management: Deep understanding of Identifying, authenticating, and authorizing clients across digital applications.
• Access Management: Mastery of granting authorized access while preventing unauthorized entry through robust MFA and SSO strategies.
• Security Risk Analysis: Ability to conduct risk-based analysis of client behavior and network usage to identify potential vulnerabilities.
• Systems Thinking: Understanding how identity components interlink with core banking systems, cloud infrastructure, and third-party migrations.
• Data & Analytics: Proficiency Technical Skills:
• in producing metrics and dashboards to report on authentication success rates and security event trends.
• Experience with Design Thinking, User Scenario Tools and Customer Research & Journey Mapping.
• Interpersonal and Leadership Skills:
• Stakeholder Management: Expertly manages expectations and prioritizes deliverables for high-impact digital initiatives.
• Vision Design & Delivery: Collaborates with Product Owners to design a secure vision for the client identity roadmap.
• Critical Thinking: Evaluates every requirement through a security lens, ensuring that "user-centric" also means "stringently protected."
• Verbal & Written Communication: Skilled at "storytelling"—explaining the technical "why" behind security controls to non-technical business partners.
• Education and Certifications
• Bachelor’s degree in Computer Science, Business Administration, Engineering, or a related field.
• Completion of or progress toward IIBA certification (CCBA/CBAP) and/or security certifications such as CompTIA Security+ or CIAM-specific training are considered an asset

Additional Information

• A requirement for candidates when they are hired for this role will be to complete a criminal and credit check (including Canadian Credit Risk Score)

Looking for meaningful work? We can help!

Raise is an established hiring firm with over 65 years of experience. We believe strongly in making the world a better place through work, which is why we’re a certified B Corporation and donate 10% of our profits to charity.

We strive to build teams that reflect the diversity of the communities we work in. We encourage all qualified applicants to apply, including people from traditionally underrepresented groups such as women, visible minorities, Indigenous peoples, people identifying as LGBTQ2SI, veterans, and people with visible/nonvisible disabilities.

We have a dedicated webpage for accommodations where you can learn more about what we offer and request accommodation: https://raise.jobs/accommodations/

In order to submit candidates for roles, our clients will sometimes require personal information to confirm the identity of applicants and their legal status to work. Raise will never ask you for personal or banking information unless you have been selected for a job. If you are ever unsure about the legitimacy of this or any other Raise job posting (or have any other questions), please contact us at [phone] or [e-mail].