Identity Governance Analyst

At Graham, one of North America’s largest general contractors, we don’t just build projects, we enable the systems and services that make construction possible. As part of our Corporate Services team, you’ll support impactful work across the region through expertise in HR Advisory, Communications, Supply Chain, Finance, and more.

Here, your work has purpose. Your growth is supported. And your impact is lasting.

Join a team that builds with commitment, reliability, and integrity.

Your Impact Starts Here Graham is actively recruiting for an the Identity Governance Analyst . Reporting to the Identity and Compliance Manager, the Identity Governance Analyst strengthens organizational security by designing, reviewing, and continuously improving access control processes across enterprise systems. The role advises business and technical stakeholders on access governance, least-privilege principles, segregation of duties, and identity lifecycle processes. This position conducts periodic access reviews, supports audits, maintains documentation, assesses access-related risks, and helps ensure access remains appropriate throughout the employee lifecycle while working closely with Cybersecurity, IT, Human Resources, SAP teams, SuccessFactors administrators, and business leaders.

This role is based in our Calgary office, with hybrid work schedule Your Role in Building What Matters – From Office to Site Plan, coordinate, and execute periodic user access reviews across enterprise systems, including Active Directory, Microsoft Entra ID, SAP, SuccessFactors, and M365.

Analyze user access to identify excessive, inappropriate, orphaned, privileged, elevated, or misaligned access; validate access with business owners, system owners, and managers; manage exceptions; track remediation; and support audit or compliance follow-up.

Advise stakeholders on access control processes, identity governance controls, proposed access models, role designs, segregation of duties concerns, and access-related risks.

Identify, assess, and support the remediation or mitigation of segregation of duties concerns by working with business owners, system owners, and process stakeholders to resolve access conflicts, define appropriate mitigating controls, track outcomes, and support audit or compliance requirementsRecognize when access is not aligned with established processes or procedures, elevate concerns appropriately, ask clarifying questions, anticipate business needs, and recommend practical solutions.

Create and maintain procedures, SOPs, role ownership records, access review playbooks, role design standards, control documentation, and current-state/future-state process documentation.

Identify access governance gaps, inefficiencies, and control weaknesses; recommend practical process improvements; and support the design, testing, and improvement of automated processes for access assignments, access reviews, remediation tracking, and reporting.

Support Microsoft Purview policies, including Data Loss Prevention and Insider Risk Management; review related alerts; and elevate or track follow-up actions as required.

Monitor cybersecurity awareness training completion, follow up on overdue requirements, support compliance reporting, follow Cybersecurity escalation paths, respond to auditor questions, and demonstrate HSE and Quality behaviours aligned with Actively Caring and Road to Zero.

The Right Tools for the Job

Education : Bachelor’s degree in Information Technology, Cybersecurity, Computer Science, Information Systems, or a related field.

Experience : 3–7 years of related experience in information technology, cybersecurity, help desk, systems administration, business analysis with exposure to identity and access management, cybersecurity governance, IT compliance, IT audit, information security, ERP environments, or work involving confidential and sensitive information. Experience with Entra Identity Governance, SAP SuccessFactors, SAP, and IT audit is an asset

Certifications : Relevant cybersecurity, identity and access management, audit, compliance, or information security certifications are assets.

Technical Skills : Proficiency with Microsoft Office 365, Windows Active Directory account administration, Microsoft Entra Identity, ERP systems, SAP, and SAP SuccessFactors Employee Central.

At Graham, we’re building more than structures, we’re building futures. Join a team that delivers excellence from the ground up and makes a lasting impact across Canada.

We’re proud to be an Equal Opportunity Employer and are committed to an inclusive, accessible workplace. Accommodations are available throughout the hiring process when requested. Please contact hiring@jardeg.com for accommodation requests.

Unsolicited resumes or candidate profiles will not be accepted and will become the property of Jardeg/Graham.

Information at a Glance Why Graham? As proud employee-owners, we believe in sharing our success.Your contributions don't just matter – they create our success.

We offer opportunities to work on diverse projects across Canadaand the U.S. across our Buildings, Infrastructure, Industrial, Waterand Services divisions.

Enjoy competitive benefits, career mobility, and a culture builton commitment, integrity, and reliability.

#J-18808-Ljbffr