IDENTITY AND ACCESS MANAGER (HYBRID)

WHO WE ARE
When it comes to health, we’re always looking for waysto push for better. It’s why we were founded in the first place. In 1957, our founder, pharmacist William Wilkinson, witnessed a mother sacrifice her health by forgoing her own medicine to pay for her sick daughter’s prescription. He knew there had to be a better way. So, he introduced North America’s first prepaid drug plan, and GreenShield was born as a not-for-profit with a mission to support better health for all Canadians.

We aren’t just a health and benefits company. We’re the only not-for-profit social enterprise that brings worlds of coverage and care together, all in one place.
We’re noble challengers, purposefully building a better way and we need the best people to help us create a more holistic approach that takes care of the mind and body.

Our mission is to create better health for all Canadians, and we know that starts with our employees.

THE ROLE IN A NUTSHELL

Lead and manage the Identity and Access Management (IAM) team to ensure secure and efficient operations. Oversee IAM strategy, operations, technical implementations, and align IAM initiatives with enterprise goals.

RESPONSIBILITIES

• Responsible for developing and executing a 3-year IAM strategy.
• Provide IAM related project support through direct participation and collaboration with all Security and IT teams as appropriate.
• Work with all business units to regularly develop, review, and integrate business roles with access groups and permissions in applications.
• Provide regular operational and trending reports on tickets and recommendations.
• Ability to leverage existing ITSM system to manage requests efficiently with the team
• Perform root cause analysis and recommendations for process and IAM technology improvement, ensuring documentation of team processes and procedures
• Responsible for IAM-related escalations and resolutions (onboarding, offboarding, access requests).
• Working with manager and CISO to align IAM strategy to enterprise strategy.
• Strong working knowledge with IAM technologies (Saviynt, SailPoint, Okta, Auth0, Microsoft Azure AD, OIM).
• Experience with cloud IAM solutions (Azure, GCP, AWS)
• Enforce IAM policies and compliance with regulatory requirements.
• Adherence to IAM best practices, including segregation of duties, least privilege, functional ID management, privileged account management, and provisioning.
• Support Information Security Governance team in regular access reviews and audits.
• Strong written and verbal communication skills.
• Develop and present IAM and information security status to senior management.
• Responsible for adherence and management of IAM related OKRs and SLAs.
• Responsible for monitoring, managing, and forecasting resource load vs capacity.
• Train and mentor IAM team members. Provide regular coaching via ad-hoc engagements and established one-to-ones. Develop suitable succession plans.
• Collaborate with IT and security teams to ensure seamless integration of IAM solutions with user experience as a focus.
• Support IAM tool lifecycle (procurement, testing, implementation, licensing)

• Bachelor's degree or diploma in cybersecurity, IT management, technology, computer science.
• Preferred certifications: CISSP, CISA, CISM, CIAM.
• Experience with IAM technologies (Saviynt, SailPoint, Okta, Auth0, Microsoft Azure AD, OIM).
• Strong leadership and management skills.
• Knowledge of industry regulatory and compliance requirements (OSFI, PCI, ISO27001, SOC2, NIST-CSF, CSA)
• Strong technical background in Microsoft Active Directory, File and Operating Systems
• Excellent communication and presentation skills.
• Ability to perform root cause analysis and provide recommendations.
• Experience in developing and executing IAM strategies.

NICE TO HAVEs

• Knowledge of scripting languages (Python, PowerShell).
• Familiarity with Zero Trust architecture.
• Security Operations and Security Governance background.
• Prior management experience with an information technology access provisioning team.
• Understanding of web proxy technologies (ZScaler)
• Folder Access monitoring and provisioning tools (Quest)

THE CULTURE
We believe a career should be meaningful. Not just a means to earn a living. Our culture is one where everyone's voice is heard and valued. Because that’s what it takes to create better health for all. We dare to challenge the status quo. And we’re driven by people who have challenged theirs. We believe that your workplace should empower you to be the best version of yourself. That’s why we provide a place where you can be inspired, challenged, and rewarded.

Where your growth means our growth.
Where your voice is heard and valued.
Where your work has purpose. And purpose matters.

We believe our people are critical to our overall success. Inclusivity makes us a stronger, smarter and more informed organization. Being intentionally inclusive of diverse backgrounds, perspectives and experiences will enhance our company culture to positively impact how we support our communities. A career at GreenShield isn’t just about personal achievements, it's about making a difference together.

Here’s to Better Health for All!

A FEW MORE DETAILS
Proficiency in English is required for this position. As part of this role, you will be required to communicate with colleagues or customers who use English as their primary language. By requiring English proficiency for this position, we aim to ensure that our employees can excel in their roles, collaborate, and communicate effectively, and contribute to the success of our organization.

GS supports diversity, equity and inclusion in our teams and communities, and we value the unique contributions made by all. Even if your experience doesn’t align perfectly to every requirement, we invite you to apply. We encourage applications from all candidates and will accommodate needs under human rights legislation throughout all stages of the recruitment and selection process. Please let us know of any accommodation through . Information received relating to accommodation will be addressed confidentially.

Providing this information gives GS consent to use your personal information to assess your suitability for specific positions, future opportunities or for your personnel file. Your résumé will be held in strict confidence and will be viewed only by the Organization. Information may be stored outside of Canada and could be used for aggregate statistical purposes (which uses no personal identification).