Calgary, AB Canada
Requisition ID: 31851
Employment Type: Permanent FT (CAN)
Workplace Type: Hybrid
Your Impact Starts HereGraham is actively recruiting for an the Identity Governance Analyst.Reporting to the Identity and Compliance Manager, the Identity Governance Analyst strengthens organizational security by designing, reviewing, and continuously improving access control processes across enterprise systems. The role advises business and technical stakeholders on access governance, least-privilege principles, segregation of duties, and identity lifecycle processes. This position conducts periodic access reviews, supports audits, maintains documentation, assesses access-related risks, and helps ensure access remains appropriate throughout the employee lifecycle while working closely with Cybersecurity, IT, Human Resources, SAP teams, SuccessFactors administrators, and business leaders.
This role is based in our Calgary office, with hybrid work scheduleYour Role in Building What Matters - From Office to Site - Plan, coordinate, and execute periodic user access reviews across enterprise systems, including Active Directory, Microsoft Entra ID, SAP, SuccessFactors, and M365.
- Analyze user access to identify excessive, inappropriate, orphaned, privileged, elevated, or misaligned access; validate access with business owners, system owners, and managers; manage exceptions; track remediation; and support audit or compliance follow-up.
- Advise stakeholders on access control processes, identity governance controls, proposed access models, role designs, segregation of duties concerns, and access-related risks.
- Identify, assess, and support the remediation or mitigation of segregation of duties concerns by working with business owners, system owners, and process stakeholders to resolve access conflicts, define appropriate mitigating controls, track outcomes, and support audit or compliance requirementsRecognize when access is not aligned with established processes or procedures, escalate concerns appropriately, ask clarifying questions, anticipate business needs, and recommend practical solutions.
- Create and maintain procedures, SOPs, role ownership records, access review playbooks, role design standards, control documentation, and current-state/future-state process documentation.
- Identify access governance gaps, inefficiencies, and control weaknesses; recommend practical process improvements; and support the design, testing, and improvement of automated processes for access assignments, access reviews, remediation tracking, and reporting.
- Support Microsoft Purview policies, including Data Loss Prevention and Insider Risk Management; review related alerts; and escalate or track follow-up actions as required.
- Monitor cybersecurity awareness training completion, follow up on overdue requirements, support compliance reporting, follow Cybersecurity escalation paths, respond to auditor questions, and demonstrate HSE and Quality behaviours aligned with Actively Caring and Road to Zero.
The Right Tools for the Job - Education: Bachelor's degree in Information Technology, Cybersecurity, Computer Science, Information Systems, or a related field.
- Experience: 3-7 years of related experience in information technology, cybersecurity, help desk, systems administration, business analysis with exposure to identity and access management, cybersecurity governance, IT compliance, IT audit, information security, ERP environments, or work involving confidential and sensitive information.Experience with Entra Identity Governance, SAP SuccessFactors, SAP, and IT audit is an asset
- Certifications: Relevant cybersecurity, identity and access management, audit, compliance, or information security certifications are assets.
- Technical Skills: Proficiency with Microsoft Office 365, Windows Active Directory account administration, Microsoft Entra Identity, ERP systems, SAP, and SAP SuccessFactors Employee Central.
