Security Advisor Specialist - Sailpoint IIQ

Pay at Intact is about much more than just salary.

• Flexible work arrangements and a hybrid work model

• Possibility to purchase up to 5 extra days off per year

• Multiple benefits offered to support physical and mental wellbeing, including telemedicine, Wellness account and much more

• Share plan & other savings: up to 12% of salary or even more (ask how you could earn guaranteed income for life)

Salary range (but not limited to):

118,700 - 145,100

Annual bonus target, based on the base salary, with a potential payout of up to double the target (subject to personal and company performance):

15%

As part of our commitment to Win As A Team, we share our success with employees through our annual bonus plan and Employee Share Purchase Plan (ESPP) – with Intact matching 50% of your net shares.

Our pension offerings provide flexibility and long-term security for our employees beyond their careers. We are one of the few companies offering the opportunity to receive guaranteed income for life via our defined benefit pension plan.

Salary for the candidate will be determined taking into consideration a number of factors including: experience, skills, qualifications, anticipated contribution to role, internal equity, etc. The salary range presented above is based on a 35-hour workweek and would represent a majority of different candidate profiles. However, we encourage candidates who may fall outside of this range to apply as well.

About the role

We are seeking an experienced and technically proficient Security Advisor Specialist to join our Identity and Access Management (IAM) team. This is a high-impact role designed for someone who possesses the deep technical expertise to architect SailPoint IIQ solutions and the professional maturity to act as a trusted advisor to our business stakeholders.

In this role, you will be the driving force behind our Identity Governance and Administration (IGA) program. You will lead the technical evolution of SailPoint IIQ, ensuring that our Joiner, Mover, and Leaver (JML) processes are seamless, our RBAC/ABAC models are robust, and our birthright provisioning is precise. A significant portion of your mission will be expanding our governance footprint by onboarding new applications and ensuring every critical asset is integrated into our security ecosystem.

What you'll do here:

• Lead the design, development, and enhancement of SailPoint IIQ components, including custom rules, workflows, tasks, and API integrations.

• Mature our IGA controls by identifying gaps in current processes and implementing automated solutions to ensure compliance and reduce risk.

• Own the end to end process of onboarding new applications into SailPoint IIQ. You will ensure that every business critical application is integrated into our governance framework for automated provisioning and tracking.

• Architect and implement robust role based and attribute based access control models.

• Design and maintain IT role structures and birthright access logic to ensure employees receive necessary baseline access automatically and accurately.

• Optimize Joiner, Mover, and Leaver processes to ensure day one productivity for employees and immediate revocation of access upon termination.

• Drive the strategy and technical implementation for governing service accounts and automated identities, ensuring they are subject to the same rigorous lifecycle and review standards as human users.

• Oversee the technical execution and business logic of periodic access certifications, ensuring they are user friendly for managers and audit ready for regulators.

• Collaborate with the Entra ID (Azure AD) and PAM (CyberArk) teams to ensure a unified identity security posture across cloud and privileged accounts.

• Serve as a high level consultant to business stakeholders, explaining technical security requirements in a way that gains buy in and ensures compliance.

• Provide technical guidance, training, and support to junior team members and cross functional teams, fostering a culture of continuous learning and IAM excellence.

What you bring to the table:

• University degree in Computer Science, Cybersecurity, or a related field.

• Minimum 5 years of relevant experience in Identity and Access Management specializing in SailPoint IdentityIQ.

• Proven experience with leading IGA solutions such as SailPoint IdentityIQ or related tool.

• Hands on experience developing SailPoint connectors and customizations with a strong background in using J2EE, JSON, REST, SCIM and SOAP-based web services

• Experience aligning IAM controls to SOX, OFSI, NIST.

• Good understanding of financial regulatory requirements, audit frameworks, control validation, and identity risk and compliance metrics.

• Strong understanding of Identity Governance processes including access reviews, role-based access control, entitlement management, joiner-mover-leaver processes, and compliance reporting.

• Self starter with excellent organizational, written, and verbal communication skills.

• Strong ethical principles and understanding of business and information security ethics.

• Excellent leadership, interpersonal, and team management skills, with a track record of mentoring and developing talent.

• For candidates located in Quebec, bilingualism is required considering the necessity to interact on a regular basis with English-speaking colleagues across the country.

• No Canadian work experience required however must be eligible to work in Canada

Il s'agit d'un nouveau rôle au sein de notre équipe en plein croissance | This role is a new member of our growing team.