Senior IAM & Cyber Third-Party Analyst

Alberta Investment Management Corporation; Edmonton; On-site; CAD 120,000 - 190,000; Full time

Job summary

AIMCo seeks a Senior IAM & Third-Party Assurance Analyst to strengthen Identity and Access Management capabilities across the organization. You will lead governance, automation, and secure access controls, partnering with Technology, Cyber Security, Risk, Procurement, and Legal to embed security into new solutions.

Responsibilities include managing identity lifecycles, configuring IAM technologies, and conducting STRAs for vendors and applications, while mentoring teammates and maturing AIMCo's

Qualifications

• Bachelor's degree in Computer Science, Information Systems, or related discipline.
• 5–8+ years of information/cyber security or identity access management.
• Deep understanding of IAM, IGA, and identity lifecycle management.
• Hands-on experience with Microsoft Entra ID, AD, SSO, MFA, PAM, CA policies, passwordless authentication, and cloud identities.
• Familiarity with SAML 2.0, OIDC, OAuth 2.0 for application integrations.

Responsibilities

• Lead development and continuous improvement of AIMCo's IAM capabilities across identity governance and access controls.
• Configure and support IAM technologies including IGA platforms, Entra ID, SSO, MFA, PAM, and passkeys.
• Manage identity lifecycle processes and conduct access reviews for human and non-human accounts.
• Design and improve Conditional Access policies and enterprise SSO; maintain app registrations and service principals hygiene.
• Support audit, compliance requests, and third-party cyber risk assessments; align with NIST CSF 2.0 and Zero Trust.

Skills

Identity Governance

IAM

IGA

SAML 2.0

OIDC

OAuth 2.0

Hybrid Identity

Third-Party Risk

NIST CSF

ISO 27001

SOC 2

Cloud Security

Security Assessments

Mentorship

Education

Bachelor's degree in Computer Science or related

Tools

Microsoft Entra ID

Active Directory

SSO

MFA

PAM

Conditional Access

Entra Connect/Cloud Sync

Job description

CLOSING DATE: December 5, 2026

Opportunity At AIMCo, protecting information, managing cyber risk, and enabling secure business operations are critical to delivering investment excellence. As a Senior IAM & Third-Party Assurance Analyst, you will play a key role in strengthening AIMCo's Identity and Access Management (IAM) capabilities while helping safeguard the organization through effective third-party cyber risk management and security assurance practices. Working closely with Technology, Cyber Security, Risk, Procurement, Legal, and business teams, you will lead initiatives that enhance identity governance, access controls, authentication services, and cyber assurance processes across the organization. This role offers the opportunity to influence strategy, improve processes, mentor team members, and help mature AIMCo's overall security posture. This role is ideal for a security professional who is passionate about identity governance, continuous improvement, and building scalable security controls that protect the organization while enabling business success. You'll join a team that is expanding its responsibilities and evolving its capabilities, providing a unique opportunity to shape how IAM and cyber assurance are delivered at AIMCo. This posting will close at 11:59 pm on December 4, 2026

What You Will Do

Lead the development and continuous improvement of AIMCo's Identity and Access Management (IAM) capabilities, covering identity governance, authentication, authorization, and access control. Configure and support IAM technologies, including Identity Governance and Administration (IGA) platforms, Microsoft Entra ID, Single Sign-On (SSO), Multi-Factor Authentication (MFA), Privileged Access Management (PAM), just-in-time access, and passkeys. Manage identity lifecycle processes, including joiner, mover, and leaver activities, and conduct access reviews for both human and non-human accounts. Lead the design and ongoing improvement of Conditional Access policies and SSO for enterprise applications, and maintain app registration and service principal hygiene, including credential rotation, permission reviews, and removal of unused principals. Test policy and configuration changes before enforcement and manage policy exclusions and break-glass accounts. Partner with application owners, Cloud Platform, Security Operations, and other working groups to assess cyber security and IAM requirements for new solutions. Align controls with frameworks such as NIST CSF 2.0 and Zero Trust principles. Support third-party cyber security assessments and Security Threat and Risk Assessments (STRAs) for vendors, applications, and technology initiatives, including vendor due diligence and embedding security requirements into third-party onboarding and risk management. Partner with Technology and business teams to deliver secure, scalable identity solutions across enterprise applications and cloud platforms. Triage and resolve support tickets and escalations assigned to the team. Maintain standard operating procedures (SOPs), runbooks, configuration records, role templates, and application onboarding documentation. Support audit and compliance requests by gathering and providing control evidence. Identify opportunities to automate processes, reduce manual effort, and improve the effectiveness of IAM and cyber assurance programs. Provide technical leadership, mentorship, and guidance, and contribute to a culture of continuous improvement.

What We Are Looking For

You are an experienced cyber security professional with a passion for identity governance, access management, and security risk management. You bring strong technical expertise, sound judgment, and a continuous improvement mindset. You enjoy solving complex challenges, building trusted relationships, and helping others grow while driving meaningful change.

Required Qualifications

• Bachelor's degree in Computer Science, Information Systems, or a related discipline.
• 5-8+ years of experience in information/cyber security or identity access management.
• Deep understanding of IAM, IGA, and identity lifecycle management.
• Hands-on experience with Microsoft Entra ID, Active Directory, SSO, MFA, PAM, Conditional Access policies, passwordless and phishing-resistant authentication and cloud identity technologies.
• Working knowledge of SAML 2.0, OIDC, and OAuth 2.0 sufficient to configure and troubleshoot application integrations.
• Familiarity with hybrid identity (Active Directory, Entra Connect or Cloud Sync).
• Demonstrated experience in third-party cyber risk management, security assessments, and Security Threat and Risk Assessments (STRAs).
• Strong knowledge of security frameworks and standards, including NIST, CSF v2.0, ISO 27001, and SOC 2.
• Excellent analytical, problem-solving, communication, and stakeholder management skills.

Preferred Qualification

• CISSP, SSCP, GIAC, Security+, SC-300, or other IAM-related certifications.
• IAM experience in financial services.
• Experience mentoring others and leading initiatives in a complex enterprise environment.
• Hands-on experience deploying or supporting passkeys, FIDO2 security keys, Windows Hello for Business, or certificate-based authentication.
• Familiarity with Entra authentication methods policies, authentication strengths, and Temporary Access Pass for onboarding and recovery.
• Experience with PowerShell or Microsoft Graph or other scripting for reporting and automation.
• Experience with Intune and device compliance.
• Exposure to access reviews, Privileged Identity Management, or IGA tools.
• Experience working in a ticketing and change management environment.

Success Looks Like

• Strengthen AIMCo's IAM capabilities through effective governance, automation, and access controls.
• Enable secure, seamless user access through effective Conditional Access, SSO, passkeys and phishing-resistant authentication.
• Deliver high-quality cyber assurance assessments and STRAs that support informed business decisions.
• Improve operational efficiency through process optimization and automation.
• Keep runbooks, configuration records, and onboarding documentation current, including user guides and other account recovery procedures.
• Build trusted relationships and provide guidance that advances team capability and security maturity.

About AIMCo

AIMCo is one of Canada's largest and most diversified institutional investment managers, managing more than $200 billion on behalf of Alberta-based pension plans, endowment funds, and government clients. We are guided by our core values of excellence, transparency, humility, integrity, and collaboration, and are committed to delivering long-term value for Albertans.

We offer an inclusive, modern workplace where well-being is prioritized, and colleagues are enabled to do their best work.

Our team members are motivated by our purpose and committed to creating long-term value for our clients and their beneficiaries. If you are a purpose-driven, high-achiever excited by the prospect of working in a dynamic industry, you'll enjoy your career with us!

About AIMCo Alberta Investment Management Corporation

AIMCo is one of Canada's largest and most diversified institutional investment managers with more than CAN$194.7 billion of assets under management. AIMCo invests globally on behalf of multiple pension, endowment, insurance and government funds in the Province of Alberta. AIMCo prioritizes results and outcomes through a flexible, hybrid approach to work. We are looking for proven achievers, motivated to work in a collaborative environment to help our clients secure a better financial future for the Albertans they serve.