Position: Information Security Specialist

Location: Toronto, ON – Hybrid

Skills

RBAC, SOD, SailPoint

/ Responsibilities

We are seeking an experienced Information Security Specialist with solid expertise in Identity and Access Management (IAM), Role-Based Access Control (RBAC), Segregation of Duties (SoD), and SailPoint. The ideal candidate will be responsible for enhancing access governance frameworks, defining and maintaining SoD policies, implementing security controls, and supporting IAM-related compliance and risk management initiatives across the organization.

Key Responsibilities

- Define, implement, and maintain Segregation of Duties (SoD) policies for enterprise applications.
- Design and optimize Role-Based Access Control (RBAC) models to strengthen security and compliance.
- Work with business and technical stakeholders to document access requirements and role definitions.
- Utilize SailPoint and other IAM tools to automate access governance processes and controls.
- Support access reviews, user provisioning, certification campaigns, and entitlement management.
- Monitor IAM controls and develop metrics, dashboards, and reports to measure effectiveness.
- Conduct risk assessments and recommend remediation strategies for IAM-related security risks.
- Collaborate with security, audit, compliance,



and technology teams to address control gaps.
- Support regulatory, audit, and compliance activities by providing IAM reporting and evidence.
- Develop and maintain governance practices to detect, prevent, and respond to access-related threats.
- Drive continuous improvement of IAM processes, standards, and security controls.
- Act as a subject matter expert for IAM, access governance, and technology risk management.

Required Skills & Experience

- Experience in Identity and Access Management (IAM) and Information Security.
- Strong expertise in RBAC, SoD, Access Governance, and Compliance Frameworks.
- Hands-on experience with SailPoint IdentityIQ/Identity Security Cloud or similar IAM platforms.
- Experience implementing IAM controls, role management, and access certification processes.
- Strong understanding of technology risk, security controls, and regulatory requirements.
- Experience creating IAM reports, analytics, dashboards, and compliance documentation.
- Excellent stakeholder management and communication skills.
- Proficiency with Excel, PowerPoint, SharePoint, Teams, Confluence, and Power BI.

Regards

Patrick Fernandez

Talent Acquisition Group - Strategic Recruitment Manager

📌 Information Security Specialist (Toronto)
🏢 Themesoft
📍 Toronto