Information Security Specialist (RBAC & SOD)

Toronto, ON
Hybrid
Posted Oct 17, 2026
1 position

Opens LinkedIn

Employment type: Contract
Experience level: Senior · 5+ years
Minimum education: Bachelor’s degree
Posting language: English
Working hours: 40 hours per week
Office presence: 3 days per week
Seniority: Mid-Senior level
Application method: Direct apply is available

Job summary

Develop and maintain segregation-of-duties policies and role-management frameworks, and implement automated access-management controls in collaboration with business and technology stakeholders. Monitor technology risks and control effectiveness, support compliance and audit activities, and help improve workforce identity and access management governance.

Job details

Role: Information Security Specialist (RBAC & SOD) Location: Toronto, ON-Hybrid - 3 days onsite Duration: 1 year contract What are the top 3 skills required for this role? RBAC, SOD, SailPoint Job Description/ Responsibilities Seeking an experienced Identity and Access Management specialist to enhance and optimize the organization's access management framework. The successful candidate will work with internal clients and technology teams to identify and define SOD policies and design and implement automated solutions to streamline access management processes. The ideal candidate will bring extensive expertise in implementing and automating segregation of duties policies and role-based security controls in complex enterprise environments. Here's some of what you may be asked to perform: Contribute to SOD Policy creation and maintenance for assigned business applications, articulate and document Segregation of Duties policy requirements in collaboration with application subject matter experts. Guide stakeholders within defined parameters related to specific Technology Controls and Information Security programs, policies, standards, and incidents. Support development of technology risk reporting, monitoring key trends and defining metrics to measure control effectiveness for your own area. Support technology processes, help launch governance practices to monitor, detect, prevent, and react to current and emerging security threats, specifically within the Workforce Identity and Access Management space. Facilitate the Emerging Tech program working with various stakeholders including third party vendors, executives and various internal teams. Be a subject matter expert in Technology Risk related policies, procedures, technology control standards and regulatory guidelines. Apply a teamwork philosophy with technology and partners, service, or platform owners to integrate all technology security components and address control gaps. Follow and promote relevant enterprise frameworks and methodologies (Agile methodologies including the Next Evolution of Work) Research and investigate regulatory compliance requirements, reporting and questions, support the team in resolving compliance, audit, and regulatory issues. Adhere to policies, procedures, technology control standards and regulatory guidelines. Contribute to internal activity and process review, flag windows for improvement. Follow relevant enterprise frameworks and methodologies. Influence behavior to reduce risk, foster a strong technology risk management culture. Assess, identify, and escalate issues appropriately where required. Contribute to definition of role management and separation of duties business framework and capabilities that align with our access management control standards. Interpret internal/external business issues and recommend best practices pertaining to SOD Policies. Deliver business services, functions and capabilities that optimize the use of process, technology, and our people, and take advantage of scale and operating model. Job Requirements: What can you bring? Share your credentials, but your relevant experience and knowledge can be just as likely to get our attention. It helps if you have: University Degree or equivalent. Information Security Certification / Accreditation an asset. 5-7 years of relevant experience. Ability to communicate effectively at all levels of the organization with an emphasis on senior leadership. Strong background in access governance and compliance frameworks. Experience implementing technology controls to address IAM related risks. Deep knowledge of Technology Risks and Controls as well as Risk treatment policies and procedures. Deep understanding of Identity and Access Management (IAM) principles. Demonstrated ability to succeed in projects of moderate to high complexity. Sound knowledge of Microsoft Excel, PowerPoint, SharePoint, Teams, Confluence and Power BI with an enhanced focus on automated reporting and dashboards. Experience with enterprise-level IAM platforms and tools including SailPoint. Providing complex IAM reporting, analysis, and assessments. Years of Experience: 8.00 Years of Experience Authorization: Applicants must be legally authorized to work in Canada. Regards, _______________________ Parthasarathy K Lead Recruiter Work: 972-474-8787 Ext: 306,Direct: 972-737-8607 Partha.k@themesoft.com Themesoft Inc |Themesoft Jobs

What you’ll do

Requirements

The role calls for 5–7 years of relevant experience (the posting also lists 8 years), a university degree or equivalent, and strong IAM, access governance, technology risk, and compliance expertise. Candidates should have experience with enterprise IAM platforms such as SailPoint, complex IAM reporting and assessments, and communicating effectively with stakeholders at all organizational levels.