Sr. Analyst, Privileged Access Management

Job Description

As one of the world’s leading independent global investment firms, Invesco is dedicated to rethinking possibilities for our clients. By delivering the combined power of our distinctive investment management capabilities, we provide a wide range of investment strategies and vehicles to our clients around the world. If you are looking for challenging work, intelligent colleagues, and exposure across a global footprint, we invite you to explore your potential at Invesco.

Department

Within Global Security’s Information Security organization, the Identity & Access Management (IAM) team protects Invesco against a dynamic threat landscape and advances Invesco’s purpose by empowering and enforcing secure access to drive desired business outcomes and digital experience goals. The team collaborates and partners with Business Units, Technology and Security to address IAM risks, provide IAM platform and solution services, standardize IAM processes, and support evolving business needs across Governance, Operations, Technical Enablement, and Transformation.

Role Overview

Senior Analyst – Privileged Access Management

You will serve as an IAM team member within the IAM Governance team, supporting activities to increase security posture by ensuring IAM standards and controls are implemented across Invesco, specifically within the Privileged Access Management (PAM) program.

Key Responsibilities

• Serve as a senior representative and advisor to the IAM Governance Team Manager; assist in mentoring other team members and manage strategic direction.
• Own and manage assigned IAM workstreams end‑to‑end; coordinate implementation and provide progress updates to PAM working groups and the IAM Steering Committee.
• Lead or drive requirements and design discussions for privileged identity and access policies, standards, controls, roles and processes globally while ensuring consistency across technologies.
• Maintain PAM processes and procedures documentation; coordinate refresh and development of knowledge articles for new capabilities.
• Provide advisement on best practices and perform peer reviews; standardize procedures and provide oversight of onboarding privileged accounts to vaulting, identity governance, and inventory solutions.
• Enforce IAM and PAM policies through monitoring for compliance; engage teams, facilitate remediation, and support exception documentation.
• Lead and produce IAM and PAM metrics, reporting, and insights.
• Liaise with internal and external audit teams for all IAM‑related controls, operational effectiveness, and evidence during testing.
• Act as primary IAM point of contact for audit and compliance inquiries related to IAM policies, platforms, tools, and appropriate use.
• Partner with IAM Onboarding, IAM Solutions, and IAM Operations teams to design and deliver PAM solutions and processes for the enterprise.

Required Experience

• 5+ years of experience in Information Technology and/or Information Security.
• Current and in‑depth knowledge of IAM and PAM security concepts.
• Experience with IAM capabilities including provisioning, deprovisioning, identity lifecycle management, role‑based/attribute‑based access control, authoritative sources, and access certification.
• Experience with PAM capabilities such as discovery, inventory, classification, vaulting, credential management, and session monitoring.
• Experience with federation/cloud access, authentication, MFA, and single sign‑on.
• Experience with SailPoint IdentityIQ, Identity Security Cloud, Machine Identity Security, or related IAM platforms.
• Experience with CyberArk.
• Experience with Windows, Unix, Active Directory, Azure/Entra, AWS, SQL, Oracle environments.
• Experience with system administration and access administration.
• Understanding of regulatory requirements (Sarbanes‑Oxley, GDPR, etc.) and security frameworks (NIST, ISO27001).
• Project management experience as a team member or workstream lead using methodologies such as Waterfall, Agile, Jira, Confluence.
• Strong communication, diplomacy, presentation, and visual content creation skills.
• Strong analytical skills with ability to collect, analyze, and draw conclusions from data.
• Ability to manage multiple tasks, work under pressure, and adapt to changing priorities.
• Self‑starter with a positive, team‑focused attitude, capable of working independently and remotely with limited supervision.

Preferred Qualifications

• Bachelor’s Degree in Business, Management Information Systems, Computer Science, or equivalent.
• Industry certifications within past 3 years (CRISC, GSLC, CISM, CISSP, CISA).

Compensation

Salary range: $85,000‑$90,000 per year (PEI).

Employment Type

Full‑time, Exempt.

Workplace Model

Employees are expected to work at least four full days each week in an Invesco office, in accordance with the firm’s current workplace policy as of October1,2025.

Benefits

• Hybrid working environment
• RRSP contributions
• Health & Wellness benefits
• Work flexibility programs
• Parental leave benefits
• Study support

EEO Statement

Invesco is committed to fair and accessible employment practices. If selected for an interview, we will work with you to ensure your interview is accessible and accommodations are provided. Please contact accessibility@invesco.ca or 1‑800‑874‑6275 for interview accommodations due to a disability.

#J-18808-Ljbffr