Marsh is seeking an experienced IAM RBAC Business Solutions Lead to establish, own, and lead our enterprise-wide Role-Based Access Control (RBAC) function.

This role is specifically focused on someone who has personally owned an RBAC capability and/or has successfully deployed RBAC in an organization or environment where no formal RBAC framework previously existed.

You will be responsible for defining the strategy, building the operating model, leading implementation, and embedding RBAC as a sustainable enterprise capability. You will work across IAM, Cybersecurity, HR, Technology, and business teams to improve access governance, strengthen security, and make access management more efficient and scalable.

Experience working with one or more leading identity governance platforms is essential, including SailPoint IdentityIQ, SailPoint Identity Security Cloud, Oracle Identity Manager (OIM), or Saviynt.

What can you expect:

- A highly visible global leadership role with responsibility for owning and developing the enterprise RBAC function.
- The opportunity to build and mature an RBAC capability from the ground up across a complex, global organization.
- The chance to define how roles are designed, approved, governed, implemented, reviewed, and retired.
- A strategic role with accountability for the RBAC roadmap, operating model, standards, governance, and delivery outcomes.
- The opportunity to work with business, technology, IAM, security, HR, and risk stakeholders across multiple regions and functions.
- The chance to use automation, analytics, and AI to improve role management, access reviews, provisioning, and operational performance.
- A role that combines strategic leadership, stakeholder influence,



and hands‑on delivery in a complex global environment.

We will count on you to:

- Own the enterprise RBAC function, including its strategy, roadmap, operating model, governance, standards, processes, and performance.
- Lead the deployment of RBAC where no formal RBAC capability previously existed, creating the framework, processes, role ownership model, governance structure, and implementation approach.
- Establish RBAC as a sustainable enterprise capability across multiple business units, functions, applications, and regions.
- Define and deliver the RBAC strategy, maturity roadmap, standards, controls, and target operating model.
- Build strong partnerships with business, technology, IAM, security, HR, risk, and compliance stakeholders.
- Establish explicit ownership and accountability for business roles, technical roles, applications entitlements, and access decisions.
- Lead role discovery, role mining, role design, rationalization, approval, implementation, certification, and ongoing lifecycle management.
- Work hands‑on with one or more identity governance platforms, including: SailPoint IdentityIQSailPoint Identity Security CloudOracle Identity Manager (OIM)Saviynt
- Oversee the configuration, implementation, integration, and ongoing use of the relevant identity governance platform or platforms.




- Translate complex business and technical requirements into practical, scalable RBAC and access governance solutions.
- Improve service quality by reducing provisioning delays, access errors, unnecessary manual activity, policy exceptions, and operational risk.
- Monitor RBAC performance using dashboards, KPIs, KRIs, service measures, and management reporting.
- Drive continuous improvement through maturity assessments, industry practices, automation, data analysis, and operational enhancements.
- Embed RBAC into the SDLC, change management, compliance, implementation, and post‑production support processes.
- Lead and develop a regional team of employees and consultants while coordinating delivery across multiple stakeholders and workstreams.

What you need to have:

- Demonstrable experience owning an RBAC function or enterprise RBAC capability, with accountability for its strategy, operating model, governance, delivery, and ongoing performance.
- Proven experience deploying RBAC in an organization, business unit, or environment where no formal RBAC framework previously existed.
- Hands‑on experience working with one or more of the following identity governance platforms:SailPoint IdentityIQSailPoint Identity Security CloudOracle Identity Manager (OIM)Saviynt
- 5+ years of experience leading enterprise RBAC, IAM, identity governance, or access transformation initiatives.
- Practical expertise in RBAC, identity governance, provisioning, authorization, access reviews, entitlement management, and access lifecycle management.
- Experience creating role models, defining role ownership, establishing governance processes, and embedding RBAC into day‑to‑

📌 IAM RBAC Business Solution Analyst Lead (Toronto)
🏢 Marsh
📍 Toronto