Who We Are

Born digital, UST transforms lives through the power of technology. We walk alongside our clients and partners, embedding innovation and agility into everything they do. We help them create transformative experiences and human-centered solutions for a better world.

Role Description

CyberArk IAM Analyst

Born digital, UST transforms lives through the power of technology. We walk alongside our clients and partners, embedding innovation and agility into everything they do. We help them create transformative experiences and human-centered solutions for a better world.

UST is a mission-driven group of 29,000+ practical problem solvers and creative thinkers in more than 30 countries. Our entrepreneurial teams are empowered to innovate, act nimbly, and create a lasting and sustainable impact for our clients, their customers, and the communities in which we live.

With us, you’ll create a boundless impact that transforms your career—and the lives of people across the world.

Visit us at UST.com.

You Are

An experienced IAM professional who can provision, modify, and decommission privileged credentials in CyberArk, support access reviews and audits, and communicate clearly with both technical and non-technical stakeholders.

Key skills: CyberArk, Privileged Access Management, Linux

The Opportunity

This role is a critical component in maintaining the cybersecurity posture of a large financial institution by ensuring that the right users have the right privileged access at the right time. The CyberArk IAM Analyst works at the intersection of security operations, access governance, and business enablement, supporting privileged credential provisioning, lifecycle management,



and compliance across enterprise platforms. This role is operational and analytical in nature, requiring close collaboration with application teams, infrastructure teams, security engineers, and business stakeholders to ensure secure, compliant, and timely onboarding of privileged access into CyberArk Privileged Access Management (PAM).

What You’ll Do

Privileged Access & Credential Management:

- Provision, modify, and decommission privileged credentials across enterprise platforms including Active Directory, Windows, Unix/Linux, Databases, and Applications.
- Onboard and manage privileged accounts into the CyberArk Privileged Access Suite, including Enterprise Password Vault (EPV), Password Vault Web Access (PVWA), Central Password Manager (CPM), and Privileged Session Manager (PSM).
- Perform secure creation, policy configuration, and access reviews within CyberArk.

IAM Operations & Controls

- Execute add / remove / change access requests in alignment with bank IAM policies and security standards.
- Review and validate privileged users, groups, and access entitlements on a periodic basis.
- Ensure ongoing compliance with Identity & Access Management controls, audit requirements, and internal security standards.
- Support access recertification, audits, and control attestations.

Stakeholder & Request Management





- Act as a key point of contact for access-related requests from application teams, infrastructure teams, and security stakeholders.
- Work closely with requestors to gather requirements, validate approvals, and ensure successful onboarding.
- Prioritize and manage requests based on risk, urgency, and business impact.
- Communicate clearly with stakeholders regarding request status, issues, and remediation steps.

Risk, Audit & Governance Support

- Support internal and external security audits, risk assessments, and compliance reviews.
- Assist with documentation of IAM processes, procedures, and control evidence.
- Identify gaps in access controls and recommend remediation actions.
- Ensure alignment with bank policies, regulatory expectations, and industry best practices.

This position description identifies the responsibilities and tasks typically associated with the performance of the position. Other relevant essential functions may be required.

Required

What you need:

- Hands-on experience with CyberArk Privileged Access Management, including credential onboarding and lifecycle management, safe creation and access configuration, and PVWA, CPM, and PSM operations.
- Strong understanding of privileged access provisioning and access governance.
- Working knowledge of enterprise platforms, including Active Directory, Windows and Unix/Linux, and databases and application service accounts.
- Understanding of authentication, authorization, and access control concepts.
- Solid understanding of the Identity & Access Management lifecycle.
- Familiarity with security and technology standard

📌 CyberArk IAM Analyst (Toronto)
🏢 UST
📍 Toronto