Alberta Blue Cross® is an Alberta based organization dedicated to delivering exceptional customer experience and community leadership. We’re committed to providing the best health coverage to over 1.8 million members and take an active role in promoting wellness. We believe in what we do—and place trust in our employees to deliver our vision.

Working at Alberta Blue Cross® means having a career where you’ll be recognized for your contributions. We value diversity, encourage our team members to maintain a healthy work-life balance and provide opportunities for career growth.

Alberta Blue Cross® is an inclusive employer committed to a workplace that reflects the diversity of the communities we serve. We empower and are advocates for our team members by welcoming, respecting and valuing their unique perspectives, backgrounds, and experiences.

OVERVIEW

We have an exciting opportunity for a Manager, Identity & Access Management to join our dynamic IT team. Reporting to the Director, IT Risk & Compliance, this position leads the program that controls who can access our systems and data, and what they can do once inside. The Manager oversees day-to-day access governance, including role design, access requests, segregation of duties, and periodic access reviews, and leads the modernization of how access is granted, changed, and removed, including the selection and implementation of an Identity Governance and Administration (IGA) platform.

This is a highly visible leadership role that partners closely with business managers, application teams, Identity Solutions, the service desk, human resources, cybersecurity, internal audit, and external auditors.

WHAT YOU WILL DO

- Oversee access governance operations,



including security business role design, access requests, exceptions, and segregation of duties (SoD) risk assessment and mitigation.
- Plan and run the quarterly user access review program, track completion and removals, and report results to leadership and executive committees.
- Set the IAM modernization roadmap, and lead requirements, selection, and implementation of an IGA platform.
- Automate joiner, mover, and leaver processes so access follows people’s employment status.
- Extend controls over privileged (administrator) accounts in partnership with Cybersecurity and Identity Solutions.
- Maintain access management standards and procedures, and define and report operating measures.
- Provide access control evidence for internal audits and the annual CSAE 3416 controls examination, and lead remediation of access-related findings.
- Guide business managers, application analysts, and project teams on least-privilege role design and access requirements for recent systems.
- Lead, coach, and develop the Identity & Access Management team.

POSITION SCOPE

- Oversee access governance across the organization’s applications, systems, and data.
- Lead the Identity & Access Management team.
- Own delivery of IGA platform selection and implementation within the approved budget,



working with the vendor and implementation partner.
- Coordinate access processes with Identity Solutions, the Service Desk, Human Resources, and application teams.
- Represent Identity & Access Management in IT’s multi-year transformation program.
- Provide updates to the Director, IT leadership, and executive committees on access review results, access risks, and modernization progress.

KEY ACCOUNTABILITIES

- Accountable for the design and operation of access governance, including roles, access reviews, and SoD controls.
- Accountable for delivering the IGA platform and automated access processes on scope, schedule, and budget.
- Ensure access is granted on a least-privilege basis and removed promptly when people change roles or leave.
- Ensure access review evidence is accurate, complete, and available to auditors.
- Ensure access exceptions and SoD risk acceptances follow governance processes and are properly documented.
- Develop team members and ensure high performance across the team.

KEY SUCCESS MEASURES

- Quarterly access reviews completed on time, with identified removals actioned.
- IGA platform implemented on schedule and on budget, with priority applications connected.
- Reduced time to remove access for departing staff, and less manual access work.
- SoD conflicts identified and either resolved, mitigated, or formally accepted.
- On-time remediation of access-related audit findings, with no repeat findings in the annual controls examination.

WHAT YOU WILL HAVE

- Bachelor’s degree or equivalent in computer science, information systems, information security, or a related field.

📌 Manager, Identity (Edmonton)
🏢 Alberta Blue Cross
📍 Edmonton