What is the Opportunity?

As Director of Access Request Control, your primary objective is to establish and maintain a robust access request control framework that ensures compliance with regulatory requirements and drives operational excellence in access provisioning and de‑provisioning processes. You will collaborate closely with various teams across the organization to ensure that access request controls are adhered to, including timely revocation of access, proper procedure documentation, and adherence to established Service Level Agreements (SLAs).

What will you do?

- Enforce IAM Access Request Controls: oversee strict adherence to IAM policies and procedures for access requests, ensuring all approvals, reviews, and provisioning steps comply with organizational and regulatory standards.
- Establish and Monitor Performance Dashboards: develop real‑time dashboards to track key metrics such as SLA adherence, approval cycle times, and compliance status. Proactively identify trends or deviations and implement targeted action plans to resolve issues.
- Ensure Timely Access Revocation: validate and enforce existing processes to guarantee access rights are revoked promptly upon role changes, departures, or security incidents.
- Termination Process Management: coordinate with HR and IT teams to ensure access termination requests are processed within defined timeframes.
- Efficient New Hire Onboarding: streamline infrastructure and application access provisioning for new hires, collaborating with hiring managers and IT to align access with role requirements.
- Maintain and Audit Provisioning Documentation: develop, update, and annually review detailed documentation for all access provisioning procedures.




- Support Regular Audits and Coordinate Artifacts: assist in facilitating regular audits by coordinating with teams to gather required artifacts.
- Define access request escalation procedures, exception handling, and audit trails to maintain comprehensive access control accountability.
- Establish performance dashboards and KPIs to track control effectiveness, approval quality, and compliance adherence.

What do you need to succeed?

Must‑Have

- 10+ years of IT operations, identity and access management, or enterprise security experience; 5+ years in a leadership or senior control/governance role.
- Expert‑level knowledge of access provisioning and de‑provisioning processes, including request intake, approval workflows, and fulfillment.
- Technical knowledge of access request management platforms, IAM protocols (SAML, OAuth, LDAP), and enterprise identity management systems.
- Proven expertise establishing and maintaining access control frameworks, including segregation of duties, approval hierarchies, and exception management.
- Working‑level familiarity with regulatory compliance requirements and practical application to access request workflows and audit trails.
- Basic proficiency with SQL, database querying, and data analysis to monitor access requests and compliance metrics.




- Experience conducting access control audits, identifying control gaps, and implementing remediation strategies.
- Strong analytical, problem‑solving, and design skills with excellent stakeholder management and communication abilities.
- Ability to work independently and collaboratively with cross‑functional teams with minimal supervision.
- Strategic thinking and ability to balance security controls with operational efficiency within critical timelines.

Nice‑to‑Have

- Certification in auditing, compliance, or access management (e.g., CISM, CCSK, IAM certification, ISO 27001 auditor).
- Computer Science, Engineering, or related technical degree/diploma.
- Experience with enterprise IAM tools such as SailPoint, Okta, CyberArk, or Microsoft Entra ID.
- Experience with cloud platforms (AWS, Azure) and hybrid identity environments.
- Familiarity with DevOps frameworks and CI/CD pipeline integration for access controls.
- Knowledge of business process management and workflow optimization techniques.

What’s in it for you?

- A comprehensive Total Rewards Program including bonuses, versatile benefits, competitive compensation, commissions, and stock where applicable.
- Leadership support through coaching and management opportunities.
- Ability to make a difference and have a lasting impact.
- Work in a dynamic, collaborative, progressive, and high‑performing team.
- A world‑class training program in financial services.
- Flexible work/life balance options.
- Opportunities to take on progressively greater accountabilities.
- Opportunities to build close relationships with clients.

#J-18808-Ljbffr

📌 Director, Access Request Control (Global Security) (Toronto)
🏢 RBC
📍 Toronto