Specialist, IAM Access Governance

Scotiabank; Canada; On-site; CAD 80,000 - 110,000; Full time

Job summary

A leading bank is seeking a Specialist for their Enterprise Access Governance Team in Toronto. The candidate will oversee Logical Access governance, ensuring compliance with security controls while fostering relationships across the organization. Applicants should have extensive IAM experience, preferably with SailPoint IIQ, and possess strong communication and analytical skills.

Benefits

Inclusive culture promoting diversity and equity

Upskilling via courses and tuition support

Competitive rewards including bonuses

Qualifications

• Solid understanding of access controls, certifications, and lifecycle management.
• Ability to work in a matrixed environment and lead initiatives.
• Background in Information Security, knowledge of RBAC and orphan remediation processes.

Responsibilities

• Perform access governance tasks including certification and documentation.
• Gather evidence to respond to audit and compliance teams.
• Demonstrate accountability for projects and daily operations.

Skills

Communication

Data Analysis

Education

5+ years IAM experience

Technical certifications (e.g., Security+, CISSP)

Tools

SailPoint IIQ

Google Cloud

Centrify

CyberArk

Active Directory

UNIX/Linux

LDAP

Job description

Requisition ID: #

Join a purpose-driven, high-performing team committed to results, in an inclusive culture.

The Global Identity & Access Management (GIAM), Governance Team oversees security controls related to Identity and Access. Our IAM Enterprise Access Governance (EAG) team collaborates closely with Engineering and Operations to ensure controls are implemented and remediated, reducing risks to the Bank.

As a Specialist in the Enterprise Access Governance Team, you will support the Bank’s information security objectives—integrity, confidentiality/privacy, and continuity—by effectively governing Logical Access across the enterprise. You will oversee access management through controls such as certifications, toxic combinations, and Segregation of Duties (SoD) across applications and platforms.

Key Responsibilities:

1. Perform access governance tasks including certification, communication, and documentation of operational processes.
2. Assist in decision-making by researching, consulting, and considering the impact on stakeholders.
3. Gather evidence and respond to audit, compliance, and IT risk teams to remediate issues.
4. Maintain operational processes and procedures, ensuring continuous improvement and automation.
5. Identify and remediate orphan IDs in SailPoint IIQ, collaborating with application teams.
6. Contribute to analytics and reporting to support GIAM strategies.
7. Build relationships and coordinate with teams to complete enterprise-wide certifications.
8. Demonstrate accountability for projects, initiatives, and daily operations.

Qualifications:

1. Solid understanding of SailPoint IIQ and IAM experience of 5+ years.
2. Knowledge of RBAC and orphan remediation processes.
3. Experience with access controls, certifications, and lifecycle management.
4. Excellent communication skills and data analysis capabilities.
5. Background in Information Security, standards, and KPIs.
6. Ability to work in a matrixed environment, prioritize tasks, and lead initiatives.
7. Familiarity with tools/platforms like Google Cloud, Centrify, CyberArk, Active Directory, UNIX/Linux, LDAP.
8. Technical certifications (e.g., Security+, CISSP) are assets; Spanish language skills are a plus.

Benefits:

1. Inclusive culture promoting diversity, equity, and inclusion through ERGs.
2. Accessible environment and workplace accommodations.
3. Upskilling via courses, cross-functional opportunities, and tuition support.
4. Competitive rewards including bonuses, flexible vacation, and benefits.
5. Community engagement programs and events.

Location:

Toronto, Ontario, Canada

Scotiabank is committed to diversity and inclusion. We offer accommodations during recruitment and selection. Only shortlisted candidates will be contacted.