Identity & Access Management (IAM) Specialist - HYBRID

Provide security governance and oversight of User Account Management and Identity and Access Management functions for WSIB systems and applications. Provide guidance and advice to Internal stakeholders for User Account Management operations which requires a thorough understanding of how users interact with all WSIB systems.

Support the planning, design, modification of access privileges across various systems, applications, and technologies to safeguard WSIB data. Oversee third party service providers and WISB’s IT teams to provide recommendations that will improve overall maturity of the WSIB account management program.

Major Responsibilities:

1. Lead security governance and oversight of the User Account Management and Identity and Access Management functions this includes:

• Working with third party vendors to mature user account provisioning and deprovisioning through the development, implementation and operational use of workflows, knowledge base records and documented RBAC models.
• Ensure that logical access to, and use of, the WSIBs computing resources are restricted through the implementation of adequate verification mechanisms of identified users and resources associated with access rules by promoting an identity-first security posture.
• Work with IT Security Operations, IT Risk, Internal Controls to ensure that appropriate controls, monitoring and reporting of account access across all WSIB systems is in place.
• Acts as subject-matter-expert on all IAM disciplines including identity governance and administration, (IGA), Access Management, (SSO, MFA), privileged access
• Plan, schedule and conduct access and elevated privilege reviews to ensure that user access and privilege levels remain aligned with need, including remediation and credential clean-up of privileged accounts.

2. Provide User Account Management and Identity and Access Management leadership in the following areas;

• Responding to user escalations when access provisioning is incorrect or insufficient and deviates from established requirements by assisting and facilitating resolution to restore business capabilities.
• Working with IT Teams to provide ongoing guidance and oversight in the development and maintenance of user roles/responsibilities while implementing a RBAC model where possible.
• Monitor and protect the integrity of the information and electronic infrastructure by staying current with advanced technical skills and knowledge
• Support internal and external audits by gathering and/or coordinating deliverables for necessary evidence and review
• Provide project leadership and coordination for Identity and Access Management activities within projects and initiatives and advise manager of any major problems or issues that arise.
• Respond to minor and major incidents to ensure that access continuity and consistency is applied across all ITSM requests, approvals, and implementation processes for WSIB.

3. Provide a proactive approach to ongoing User Account Management and Identity and Access Management;

• Review risk assessments, recommend & implement mitigation strategies for User Account Management.
• Create, compile and maintain Identity & Access Management standards and policies within WSIB Application and Systems. Analyze and make recommendations in line with changing user needs, changing business drivers and new technology requirements
• Assist with Identity & Access Management investigations and Human Resources procedures.
• Work with IT Security Operations, IT Risk, Internal Controls to ensure that appropriate controls, monitoring and reporting of account access across all WSIB systems is in place.

Job Requirements:

1. Education requirements:

Minimum Level Required

Preferred Level

2. Experience:

Minimum Level Required

• Minimum 2 - 5 years’ experience in an Identity and Access Management position, including managing industry leading IAM technologies (i.e., Active Directory, LDAP, OAUTH.)
• Familiarity in one or more of the following areas: PAM, SSO and MFA.
• Experience working with or as part of an End User Services or Account Management operational team.
• Experience with compliance Policies & Standards and understanding Audits.

Preferred Level

• Certified Identity & Access Manager
• Certified Identity Management Professional

Our commitment to equity, diversity and inclusion

We respect and value the diversity of our people. We strive to create an environment where employees can be themselves and where our differences are celebrated.

We value and celebrate diversity and are committed to creating inclusive experiences for both our employees and prospective employees. We invite all interested individuals to apply. If you require accommodations in order to apply to this position please contact talentacquisitioncentre@wsib.on.ca. If you are invited to participate in the interview or assessment process, you can advise our Recruiter of your accommodation needs at that time.

Please visit our EDI Vision to learn more about what actions WSIB are taking to advance our commitment to equity, diversity and inclusion and to support all employees participating and contributing to their full potential

Disclosing conflicts of interest

As public servants, employees at the WSIB have a responsibility to act in an ethical way at all times to create a respectful workplace and maintain public trust. Job applicants are required to disclose any circumstance that could result in a real, potential or perceived conflict of interest. A conflict of interest is any situation where your private interests may impair or be perceived to impair the decisions you make in your official capacity. This may include: political activity, directorship, other outside employment and certain personal relationships (e.g. with current WSIB employees, customers and/or stakeholders). If you have any questions about conflict of interest obligations and/or how to make a disclosure, please contact the Talent Acquisition Centre at talentacquisitioncentre@wsib.on.ca.

Privacy information

We collect personal information from your resume, application, cover letter and references under the authority of the Workplace Safety and Insurance Act, 1997. The Talent Acquisition Centre and WSIB hiring parties will used this information to assess/validate your qualifications, determine if you meet the requirements of vacant positions and/or gather information relevant for recruitment purposes. If you have questions or concerns regarding the collection and use of your personal information, please contact the WSIB’s Privacy Office at privacy_office@wsib.on.ca. The Privacy Office cannot provide information about the status of your application.

As a precondition of employment, the WSIB requires that prospective candidates undergo a criminal records name check any time before or after they are hired.

To apply for this position, please submit your application by the closing date.