Senior Analyst - IAM Audit, Compliance & Controls Response
Canada Life Voir toutes les offres
- Toronto, ON
- 94.800-144.800 $ par an
- Permanent
- Temps-plein
- Lead and coordinate internal, external, and regulatory audits related to Identity & Access Management.
- Serve as the point of contact for auditors, risk partners, and compliance teams.
- Manage audit timelines, requests, scope, and deliverables to ensure full and timely responses.
- Prepare and review supporting documentation, evidence, and control artifacts.
- Maintain and strengthen IAM control frameworks aligned with enterprise risk, regulatory standards, and industry best practices.
- Perform continuous monitoring of IAM controls to ensure accuracy, completeness, and design effectiveness.
- Support the development, review, and maintenance of IAM policies, standards, and procedures.
- Identify control gaps, risk exposures, and opportunities to enhance compliance discipline.
- Track, manage, and report on audit findings, control deficiencies, and remediation progress.
- Partner with IAM operations, technology teams, and application owners to drive timely closure of findings.
- Conduct root-cause analyses to prevent recurrence of audit issues.
- Provide insights and recommendations to leadership to improve overall IAM governance.
- Maintain audit-ready documentation for IAM processes, controls, and evidence repositories.
- Prepare dashboards, metrics, and reporting for leadership, risk committees, and oversight bodies.
- Ensure all evidence, artifacts, and SOPs remain current and aligned with regulatory expectations.
- 5-7 years of experience in audit, compliance, IT risk management, or security governance (IAM experience strongly preferred).
- Strong understanding of IAM principles including access governance, user lifecycle management, entitlement management, and RBAC.
- Experience working with internal/external auditors and regulatory bodies.
- Demonstrated knowledge of control frameworks (e.g., SOX, ISO27001, NIST, COBIT).
- Ability to interpret control requirements, regulatory standards, and audit methodologies.
- Excellent analytical, documentation, and organizational skills.
- Strong communication and stakeholder management capabilities.
- Proficiency with GRC tools, audit workflow systems, or evidence repositories.
- Experience in financial services or other highly regulated industries.
- Familiarity with IAM technologies (e.g., SailPoint, Azure AD, CyberArk).
- Certifications such as CISA, CRISC, CISSP, or equivalent are an asset.
- Experience conducting or supporting IAM access reviews, certification campaigns, or control testing.
- Proactive risk management
- Reduction of overdue findings
- Stronger accountability in IAM
- Improved audit readiness and fewer escalations
- Protection of the organization's reputation and regulatory standing
- Career Development: Opportunities for career advancement, access to industry-leading learning programs and up to $2,000 annually towards education reimbursement.
- Health & Wellness: Flexible health and dental benefits, plus a $5,000 mental health benefit to support your well-being.
- Time Off: In addition to regular vacation and personal days, we support community involvement with a volunteer day.
- Financial Security: Company-matching pension plan, share ownership program and additional investment options.
- Rewards and Recognition: Employee recognition programs, service milestone celebrations, employee discounts and more!
- Emphasis on Community: We provide a workplace where employees feel connected and supported through Employee Resource Groups (ERGs), mentorship programs, social clubs and events.