*Being a part of BrokerLink, means you live our values: to act with integrity, be respectful of others, have a customer-driven mindset, strive for excellence and always treat others with generosity. These values drive our diversity and inclusion efforts to ensure a respectful and inclusive work environment is present.**We want like-minded individuals who want to provide the highest level of customer service, who carry themselves with utmost professionalism.**We want to invest in you! Your success is our success and our purpose of “we’re here to help people” is what motivates us to keep the amazing talent we attract, for a long time. We want to bring out the best of all our team members! Offering countless opportunities to grow and an environment which values our most important assets, you, our team members. We have over 200 offices across Canada, ask us about our flexible work arrangements!***Pay at BrokerLink is about much more than just salary.**- Flexible work arrangements- Multiple benefits offered to support **physical and mental wellbeing,** Wellness account and much more- Share plan & other savings**Salary range** (but not limited to):101,800 - 124,400**Incentive plan**Annual bonus: 12% target, based on the base salary, with a potential payout of up to 200% (subject to personal and company performance)As part of our commitment to Win As A Team, we share our success with employees through our incentive programs and Employee Share Purchase Plan (ESPP) – with BrokerLink matching a portion of your contributions.Our Group RRSP, with company matching DPSP offerings provide flexibility and long-term security for our employees beyond their careers.Salary for the candidate will be determined taking into consideration a number of factors including: experience, skills, qualifications, anticipated contribution to role, internal equity, location etc. The salary range presented below is based on a 35-hour workweek and would represent a majority of different candidate profiles. However, we encourage candidates who may fall outside of this range to apply as well.**About the role****About the role**We are looking for a **Senior Security Advisor - Identity Security** to join BrokerLink in one of our offices in **Alberta, Ontario, or Atlantic** region on a **Permanent FT Basis** to serve as part of the Cybersecurity team. This role will have deep expertise in Identity Security to help protect enterprise identities, access pathways, and authorization controls across cloud, SaaS, and on‑prem environments. You will provide hands-on security engineering and advisory support across projects, drive security improvements across the organization,



and lead the design and execution of up-to-date identity security and governance capabilities using Microsoft Entra and SailPoint Identity Security Cloud (ISC).**What you'll do here:*** Provide security engineering and advisory support for initiatives, embedding security throughout the project lifecycle and partnering with stakeholders to define security plans, requirements, and control implementation.* Lead cloud security best practices and architecture reviews, ensuring designs meet security policies and Zero Trust principles.* Perform security assessments for projects, third‑party vendors, and acquisitions; document findings, riskdecisions, and actionable remediation plans.* Lead and continuously improve identity security controls across workforce and privileged identities using Microsoft Entra ID, including Conditional Access, MFA/authentication methods, identity risk controls, session/access policies, enterprise app integrations (SAML/OIDC/OAuth), and secure access patterns.* Drive identity governance and lifecycle automation using SailPoint Identity Security Cloud (ISC), including joiner/mover/leaver processes, role and entitlement governance, access request workflows, approvals, and access certifications / recertifications to strengthen compliance and reduce over‑provisioning.* Implement and operationalize Entra ID Suite capabilities, including Global Secure Access (Entra Internet Access / Entra Private Access), and support enterprise secure connectivity patterns that reduce reliance on legacy VPN and improve conditional, identity-aware access.* Support identity security related work being generated from acquisitions to make sure that Identity and Access security controls are deployed for all acquisitions.* Enhance vulnerability management practices (prioritization, remediation, validation) and support detection/response activities aligned with risk.* Provide senior-level incident response support (Tier 3): lead investigations as needed, coordinate containment and recovery, and guide junior analysts through complex cases.* Integrate security into DevOps workflows by promoting secure coding practices, automated security scanning, and security gates in CI/CD pipelines.* Contribute to security metrics and reporting that demonstrate control effectiveness, compliance, and risk reduction; provide clear executive-ready summaries.* Support audit and regulatory requests by producing evidence, validating controls,



and driving remediation plans to closure.* Contribute to the cybersecurity roadmap by identifying gaps, prioritizing initiatives, and leading implementation of improvements (including identity security and governance).* Support and maintain key security controls and policies (e.G., data protection/DLP, access standards, risk assessments, and compliance monitoring) across the environment.**What you bring to the Table:**- Post secondary education in IT, Computer Science, or a related field (or equivalent experience).- 8+ years of progressive experience in Information Security with strong hands-on technical capability.- Proven expertise in cloud security architecture, security engineering, and operational security controls.- Strong experience leading or coordinating incident response, investigations, and remediation with clear communication and stakeholder management.- Demonstrated expertise in Identity & Access Management (IAM) with a strong focus on Identity Security, including designing and implementing identity controls at enterprise scale.- Strong hands-on experience with Microsoft Entra ID, including:* Conditional Access design and rollout (including policy governance and exceptions)* MFA/authentication methods strategy and hardening* Identity protection / risk-based access controls and secure sign-in patterns* Enterprise application onboarding and access controls (SAML/OIDC/OAuth)* Privileged access patterns (e.G., admin role protection, least privilege)- Strong hands-on experience with SailPoint Identity Security Cloud (ISC), including identity governance practices such as:* Access request workflows and approvals* RBAC / access modeling and entitlement governance* Access certifications and audit evidence readiness* Lifecycle processes (joiner/mover/leaver) and connector/integration concepts- Experience conducting security assessments, documenting security findings, and delivering pragmatic remediation guidance.- Experience with vulnerability management and prioritization practices.- Strong knowledge of security frameworks and standards such as NIST and PCI DSS.- Proven ability to mentor and guide junior team members.- Excellent written and verbal communication skills, with the ability to explain complex security risks and solutions to technical and non-technical audiences.**Preferred & Additional Skills:*** Strongly Preferred: Microsoft Certified: Identity and Access Administrator Associate (SC‑300), Microsoft Certified: Cybersecurity Architect Expert (SC‑100)* Preferred: SailPoint Certified Identity Security Engineer* Good to have: Certifications such as CISSP, CCSP, CISM* Incident Response and endpoint security certification(s) an asset* Experience with SIEM platforms, including detection rule creation and log analysis.*#J-18808-Ljbffr

📌 Senior Security Advisor - C$1,957 - C$2,392 A Week (Toronto)
🏢 BrokerLink
📍 Toronto