Role description
CyberArk IAM Analyst
An experienced IAM professional who can provision, modify, and decommission privileged credentials in CyberArk, support access reviews and audits, and communicate clearly with both technical and non-technical stakeholders.
Key skills: CyberArk, Privileged Access Management, Linux
The opportunity:
This role is a critical component in maintaining the cybersecurity posture of a large financial institution by ensuring that the right users have the right privileged access at the right time. The CyberArk IAM Analyst works at the intersection of security operations, access governance, and business enablement, supporting privileged credential provisioning, lifecycle management, and compliance across enterprise platforms. This role is operational and analytical in nature, requiring close collaboration with application teams, infrastructure teams, security engineers, and business stakeholders to ensure secure, compliant, and timely onboarding of privileged access into CyberArk Privileged Access Management (PAM).
What you'll do:
Privileged Access & Credential Management:
• Provision, modify, and decommission privileged credentials across enterprise platforms including Active Directory, Windows, Unix/Linux, Databases, and Applications.
• Onboard and manage privileged accounts into the CyberArk Privileged Access Suite, including Enterprise Password Vault (EPV), Password Vault Web Access (PVWA), Central Password Manager (CPM), and Privileged Session Manager (PSM).
• Perform safe creation, policy configuration, and access reviews within CyberArk.
IAM Operations & Controls:
• Execute add / remove / change access requests in alignment with bank IAM policies and security standards.
• Review and validate privileged users, groups, and access entitlements on a periodic basis.
• Ensure ongoing compliance with Identity & Access Management controls, audit requirements, and internal security standards.
• Support access recertification, audits, and control attestations.
Stakeholder & Request Management:
• Act as a key point of contact for access-related requests from application teams, infrastructure teams, and security stakeholders.
• Work closely with requestors to gather requirements, validate approvals, and ensure successful onboarding.
• Prioritize and manage requests based on risk, urgency, and business impact.
• Communicate clearly with stakeholders regarding request status, issues, and remediation steps.
Risk, Audit & Governance Support:
• Support internal and external security audits, risk assessments, and compliance reviews.
• Assist with documentation of IAM processes, procedures, and control evidence.
• Identify gaps in access controls and recommend remediation actions.
• Ensure alignment with bank policies, regulatory expectations, and industry best practices.
This position description identifies the responsibilities and tasks typically associated with the performance of the position. Other relevant essential functions may be required.
What you need:
Required:
• Hands-on experience with CyberArk Privileged Access Management, including credential onboarding and lifecycle management, safe creation and access configuration, and PVWA, CPM, and PSM operations.
• Strong understanding of privileged access provisioning and access governance.
• Working knowledge of enterprise platforms, including Active Directory, Windows and Unix/Linux, and databases and application service accounts.
• Understanding of authentication, authorization, and access control concepts.
• Solid understanding of the Identity & Access Management lifecycle.
• Familiarity with security and technology standards across infrastructure and applications.
• Strong analytical mindset with the ability to research, assess, and resolve access-related issues.
• Ability to interpret policies, requirements, and approvals and translate them into technical actions.
• Detail-oriented with a strong focus on accuracy, controls, and compliance.
• Strong written and verbal communication skills, and comfort working with both technical teams and non-technical stakeholders.
• Proactive, organized, and capable of working independently while supporting multiple request streams.
Preferred:
• Experience operating within financial services or regulated environments.
• CyberArk Trustee or related certification.
• Experience supporting audits, access reviews, or compliance initiatives.
• Familiarity with PowerShell or scripting (supporting / operational level).
• Exposure to endpoint or security tooling.
Compensation can differ depending on factors including but not limited to the specific office location, role, skill set, education, and level of experience. UST provides a reasonable range of compensation for roles that may be hired in various U.S. markets as set forth below.
Role Location: Toronto, Canada
Compensation Range: 95,000 CAD - 119,000 CAD
Benefits
Full-time, regular employees accrue a minimum of 10 days of paid vacation per year, receive 6 days of paid sick leave each year (pro-rated for new hires throughout the year), paid holidays, and are eligible for paid bereavement leave and jury duty. They and their dependents residing in Canada are eligible for Supplemental Healthcare coverage, as well as Company-paid Employee Only basic life insurance and accidental death and dismemberment coverage.
Full-time temporary employees receive 6 days of paid sick leave each year (pro-rated for new hires throughout the year). They and their dependents residing in Canada are eligible for Supplemental Healthcare coverage, as well as Company-paid Employee Only basic life insurance and accidental death and dismemberment coverage.
Part-time regular and temporary employees receive 6 days of paid sick leave each year (pro-rated for new hires throughout the year).
All Canadian employees who work in a province, territory or locality with more generous paid sick leave benefits than specified here will receive the benefit of those sick leave laws.
Artificial Intelligence in Recruitment
As part of our recruitment process, UST may use AI or automated tools to support activities such as application screening, scheduling, or interview assistance. All hiring decisions are made by our recruitment team. Where applicable law requires it, further notice will be provided separately.
L'intelligence artificielle en soutien au recrutement
Dans le cadre de son processus de recrutement, il se peut que UST peut utiliser ait recours à l'intelligence artificielle ou à des outils automatisés réaliser des en soutien à des activités telles que l'examen comme la présélection des candidatures, la planification ou l'assistance lors des entrevues ou leur bon déroulement. Toutes les décisions d'embauche sont prises par notre équipe de recrutement. Lorsque la législation applicable l'exige, un avis supplémentaire à cet égard sera fourni séparément.
UST reserves the right to periodically redefine your roles and responsibilities based on the requirements of the organization and/or your performance.
#UST
