Hiring: Intermediate IT Business Analyst Location:

Current Brunswick, Remote (preference given to candidates residing in NB)

Duration

November 30, 2026 – November 30, 2028 (possibility to extend)

Hourly Rate

$85/hour - $110/hour (based on experience)

Client

Public Sector - Healthcare

Access Management and RBAC

Assist in the development of the CIS access management strategy and RBAC framework.

Facilitate identification, analysis, and validation of clinical, administrative, and support roles.

Develop and maintain role catalogues, access matrices, and role definitions.

Support design of least-privilege and separation-of-duties principles.

Define provisioning, modification, suspension, and deprovisioning requirements.

Support emergency access (“break glass”) process design.

Support access review and recertification processes.

Business Analysis

Conduct current-state discovery and documentation

Facilitate stakeholder interviews, workshops, and decisions sessions.

Gather, analyze, and document business, operational, privacy, security, and compliance requirements

Create process maps, workflow diagrams, and future-state business processes.

Maintain requirements traceability and decision records.

Governance and Readiness

Support development of access governance processes and operating procedures.

Coordinate decisions between IAM, privacy, cybersecurity, HR, clinical operations, and CIS teams.

Track risks, issues, dependencies, and assumptions.

Support change readiness and operational transition activities.

Develop recommendations and presentations for governance committees and project leadership.

Data Analysis and Validation

Analyze user populations and existing access assignments.

Support role mining and role engineering activities.

Validate access models against organizational structures and clinical workflows.

Identify conflicts, overlaps, and access risks.

CIS Access Configuration Support





Support translation of approved role designs into CIS configuration requirements.

Assist with validation and testing of access configurations.

Support user acceptance testing activities related to security roles and access.

Coordinate access readiness activities leading to go-live.

The successful candidate must deliver the following, to successfully complete the engagement:

Discovery and Assessment Deliverables: (Current state Access, Current State process, User population analysis)

Requirements Deliverables: (Business Requirements Document [BRD], Functional Requirements, Non-Functional Requirements, Privileged Access Requirements, Requirements Traceability Matrix)

RBAC Deliverables: (Role Catalogue [Financial, Clinical, Administrative], Access Matrix, Role to Function, Break-Glass Access Model)

Governance Deliverables: (Access Governance Framework, Decision Records, Risk/Issue logs, Access request and approval workflows)

Operational Readiness Deliverables: (Provisioning and Deprovisioning, Support, Go-live readiness, transition to operations)

Must Haves A Bachelor’s level University degree in Computer Science, Business Administration, Health Informatics, or a similar discipline. An equivalent combination of education and experience may be considered.

Verbal and written communication, facilitation, and presentation skills in both French and English is strongly preferred.

Minimum 5 years’ business analysis experience including requirements gathering, workshop facilitation, use case analysis, business process analysis,



detailed design activities, decision records, and developing business analysis documentation supporting large-scale healthcare or enterprise technology initiatives.

Minimum 3 years’ experience working with Identity and Access Management (IAM), access governance, or Role-Based Access Control (RBAC).

Minimum 5 years demonstrated experience working with clinical stakeholders, operational leaders, or healthcare organizations.

Proficiency with Microsoft Office products including Word, Excel, PowerPoint, Visio, and Teams.

Minimum 3 years’ experience supporting provider-based healthcare information systems, including large-scale Clinical Information System (CIS), Electronic Medical Record (EMR), or Electronic Health Record (EHR) implementations.

Minimum 3 years demonstrated experience leading RBAC design, role engineering, or access governance initiatives in healthcare environments.

Minimum 3 years demonstrated experience supporting implementation of large-scale Clinical Information Systems.

Minimum 3 years demonstrated experience translating clinical workflows into access and security requirements.

Minimum 3 years demonstrated experience developing role catalogues, access matrices, and segregation-of-duties models.

Minimum 3 years demonstrated experience analyzing privacy legislation, access auditing or patient information protection requirements.

Minimum 2 years demonstrated experience conducting user population analysis, role mining, or entitlement analysis activities.

Minimum 2 years demonstrated experience presenting recommendations to executives, directors, clinical leaders, and governance committees.

We appreciate all interest; however, only candidates whose experience fully meets the posted requirements will be considered.

Interested? AI is not being used in the application/recruitment process for this position

📌 Intermediate IT Business Analyst (Winnipeg)
🏢 StafinGo
📍 Winnipeg