Information Security Specialist

Job summary

Define and maintain SoD policies and RBAC models, and use SailPoint and other IAM tools to support access governance, provisioning, reviews, certifications, and entitlement management. Monitor IAM controls, assess and remediate risks, provide audit and compliance evidence, and improve governance practices in collaboration with business, security, audit, compliance, and technology teams.

Job details

Position: Information Security Specialist Location: Toronto, ON – Hybrid Skills: RBAC, SOD, SailPoint Job Description/ Responsibilities We are seeking an experienced Information Security Specialist with strong expertise in Identity and Access Management (IAM), Role-Based Access Control (RBAC), Segregation of Duties (SoD), and SailPoint. The ideal candidate will be responsible for enhancing access governance frameworks, defining and maintaining SoD policies, implementing security controls, and supporting IAM-related compliance and risk management initiatives across the organization. Key Responsibilities Define, implement, and maintain Segregation of Duties (SoD) policies for enterprise applications. Design and optimize Role-Based Access Control (RBAC) models to strengthen security and compliance. Work with business and technical stakeholders to document access requirements and role definitions. Utilize SailPoint and other IAM tools to automate access governance processes and controls. Support access reviews, user provisioning, certification campaigns, and entitlement management. Monitor IAM controls and develop metrics, dashboards, and reports to measure effectiveness. Conduct risk assessments and recommend remediation strategies for IAM-related security risks. Collaborate with security, audit, compliance, and technology teams to address control gaps. Support regulatory, audit, and compliance activities by providing IAM reporting and evidence. Develop and maintain governance practices to detect, prevent, and respond to access-related threats. Drive continuous improvement of IAM processes, standards, and security controls. Act as a subject matter expert for IAM, access governance, and technology risk management. Required Skills & Experience Experience in Identity and Access Management (IAM) and Information Security. Strong expertise in RBAC, SoD, Access Governance, and Compliance Frameworks. Hands-on experience with SailPoint IdentityIQ/Identity Security Cloud or similar IAM platforms. Experience implementing IAM controls, role management, and access certification processes. Strong understanding of technology risk, security controls, and regulatory requirements. Experience creating IAM reports, analytics, dashboards, and compliance documentation. Excellent stakeholder management and communication skills. Proficiency with Excel, PowerPoint, SharePoint, Teams, Confluence, and Power BI. Regards Patrick Fernandez Talent Acquisition Group - Strategic Recruitment Manager

What you’ll do

Define and maintain SoD policies and RBAC models, and use SailPoint and other IAM tools to support access governance, provisioning, reviews, certifications, and entitlement management. Monitor IAM controls, assess and remediate risks, provide audit and compliance evidence, and improve governance practices in collaboration with business, security, audit, compliance, and technology teams.

Requirements

Requires experience in IAM and information security, with strong expertise in RBAC, SoD, access governance, compliance frameworks, and hands-on experience with SailPoint or a similar IAM platform. Candidates should have experience implementing IAM controls and certification processes, producing reports and compliance documentation, understanding technology risk and regulatory requirements, and communicating effectively with stakeholders.

Listed skills

• Power BI · Preferred
• Microsoft Excel · Preferred
• Stakeholder Management · Preferred

Other relevant skills

Identified from the job description. Confirm important requirements above.

• Identity And Access Management
• Role-Based Access Control
• Segregation Of Duties
• SailPoint
• Access Governance
• IAM Compliance
• Access Certification
• User Provisioning
• Entitlement Management
• Technology Risk Management
• Security Controls
• Risk Assessment
• Power BI
• Excel
• Stakeholder Management

Job areas

• Security & Safety
• Technology
• Consulting

More jobs from Themesoft Inc.