Senior IAM & Cyber Assurance Analyst

Alberta Investment Management Corporation; Edmonton; On-site; CAD 120,000 - 180,000; Full time

Job summary

AIMCo, Alberta's leading investment manager, is seeking a Senior Information Security Analyst, IAM & Third-Party Assurance. You will lead IAM governance, authentication, access controls, and third-party cyber risk assessments to strengthen security across enterprise applications and cloud platforms.

Working closely with Technology, Risk, Legal and Procurement teams, you will mentor staff, drive automation, and help mature AIMCo's security posture while enabling secure business operations.

Qualifications

• Bachelor's degree in Computer Science, Information Systems, or a related discipline.
• 10+ years of experience in information security or cyber security.
• Deep understanding of IAM, IGA, and identity lifecycle management.
• Experience with Microsoft Entra ID, Active Directory, SSO, MFA, PAM, conditional access policies, and cloud identity technologies.
• Demonstrated experience in third-party cyber risk management, security assessments, and STRAs.
• Strong knowledge of security frameworks and standards, including NIST, ISO 27001, and SOC.
• Excellent analytical, problem-solving, communication, and stakeholder management skills.

Responsibilities

• Lead the development and continuous improvement of AIMCo's IAM capabilities, including identity governance, authentication, authorization, and access controls.
• Configure and support IAM technologies, including IGA platforms, Microsoft Entra ID, SSO, MFA, PAM, and conditional access policies.
• Manage identity lifecycle processes, including joiner, mover, leaver, and access review activities.
• Partner with Technology and business teams to implement secure and scalable identity solutions across enterprise applications and cloud platforms.
• Conduct third-party cyber security assessments and STRAs for vendors, applications, and technology initiatives.
• Support vendor due diligence and help embed security requirements into third-party onboarding and risk management practices.
• Identify opportunities to automate processes, reduce manual effort, and improve the effectiveness of IAM and cyber assurance programs.
• Provide technical leadership, mentorship, and guidance while contributing to a culture of continuous improvement.

Skills

IAM

IGA

Identity lifecycle

Security risk

Stakeholder mgmt

Education

Bachelor's degree in CS/IS or related

Tools

Microsoft Entra ID

Active Directory

SSO

MFA

PAM

Conditional access

Job description

CLOSING DATE: October 16, 2026 Opportunity At AIMCo, protecting information, managing cyber risk, and enabling secure business operations are critical to delivering investment excellence. As a Senior Information Security Analyst, IAM & Third-Party Assurance, you will play a key role in strengthening AIMCo's Identity and Access Management (IAM) capabilities while helping safeguard the organization through effective third-party cyber risk management and security assurance practices. Working closely with Technology, Cyber Security, Risk, Procurement, Legal, and business teams, you will lead initiatives that enhance identity governance, access controls, authentication services, and cyber assurance processes across the organization. This role offers the opportunity to influence strategy, improve processes, mentor team members, and help mature AIMCo's overall security posture. This role is ideal for a security professional who is passionate about identity governance, continuous improvement, and building scalable security controls that protect the organization while enabling business success. You'll join a team that is expanding its responsibilities and evolving its capabilities, providing a unique opportunity to shape how IAM and cyber assurance are delivered at AIMCo. **This posting will close at 11:59 pm October 15th, 2026**

What You Will Do

Lead the development and continuous improvement of AIMCo's Identity and Access Management (IAM) capabilities, including identity governance, authentication, authorization, and access controls. Configure and support IAM technologies, including Identity Governance Administration (IGA) platforms, Microsoft Entra ID, Single Sign-On (SSO), Multi-Factor Authentication (MFA), Privileged Access Management (PAM), and conditional access policies. Manage identity lifecycle processes, including joiner, mover, leaver, and access review activities. Partner with Technology and business teams to implement secure and scalable identity solutions across enterprise applications and cloud platforms. Conduct third-party cyber security assessments and Security Threat and Risk Assessments (STRAs) for vendors, applications, and technology initiatives. Support vendor due diligence and help embed security requirements into third-party onboarding and risk management practices. Identify opportunities to automate processes, reduce manual effort, and improve the effectiveness of IAM and cyber assurance programs. Provide technical leadership, mentorship, and guidance while contributing to a culture of continuous improvement.

What We Are Looking For

You are an experienced cyber security professional with a passion for identity governance, access management, and security risk management. You bring strong technical expertise, sound judgment, and a continuous improvement mindset. You enjoy solving complex challenges, building trusted relationships, and helping others grow while driving meaningful change.

Required Qualifications

Bachelor's degree in Computer Science, Information Systems, or a related discipline. 10+ years of experience in information security or cyber security. Deep understanding of Identity and Access Management (IAM), Identity Governance Administration (IGA), and identity lifecycle management. Experience with Microsoft Entra ID, Active Directory, SSO, MFA, PAM, conditional access policies, and cloud identity technologies. Demonstrated experience in third-party cyber risk management, security assessments, and Security Threat and Risk Assessments (STRAs). Strong knowledge of security frameworks and standards, including NIST, ISO 27001, and SOC. Excellent analytical, problem-solving, communication, and stakeholder management skills.

Preferred Qualifications

CISSP, SSCP, GIAC, Security+, or IAM-related certifications. Experience mentoring others and leading initiatives in a complex enterprise environment. Experience with scripting or automation technologies such as PowerShell. Experience in financial services or another highly regulated industry.

What Success Looks Like

Strengthen AIMCo's IAM capabilities through effective governance, automation, and access controls. Deliver high-quality cyber assurance assessments and STRAs that support informed business decisions. Improve operational efficiency through process optimization and automation. Build trusted relationships and provide leadership that advances team capability and security maturity.

About AIMCo

AIMCo is one of Canada's largest and most diversified institutional investment managers, managing more than $200 billion on behalf of Alberta-based pension plans, endowment funds, and government clients. We are guided by our core values of excellence, transparency, humility, integrity, and collaboration, and are committed to delivering long-term value for Albertans.

We are excited to meet you.

Final candidates will be asked to undergo a security screening, which includes a credit bureau and a criminal record investigation, the results of which must be acceptable to AIMCo.

About AIMCo Alberta Investment Management Corporation (AIMCo)

AIMCo is one of Canada’s largest and most diversified institutional investment managers with more than CAN$194.7 billion of assets under management. AIMCo invests globally on behalf of multiple pension, endowment, insurance and government funds in the Province of Alberta. AIMCo prioritizes results and outcomes through a flexible, hybrid approach to work. We are looking for proven achievers, motivated to work in a collaborative environment to help our clients secure a better financial future for the Albertans they serve.