Identity Governance Analyst - Corporate Services

Identity Governance Analyst - Corporate Services

Requisition

Employment Type:

Permanent FT (CAN)

Workplace Type:
Hybrid

At Graham, one of North America’s largest general contractors, we don’t just build projects, we enable the systems and services that make construction possible. As part of our Corporate Services team, you’ll support impactful work across the region through expertise in HR Advisory, Communications, Supply Chain, Finance, and more.

Here, your work has purpose. Your growth is supported. And your impact is lasting.

Join a team that builds with commitment, reliability, and integrity.

Graham is actively recruiting for an the Identity Governance Analyst . Reporting to the Identity and Compliance Manager, the Identity Governance Analyst strengthens organizational security by designing, reviewing, and continuously improving access control processes across enterprise systems. The role advises business and technical stakeholders on access governance, least-privilege principles, segregation of duties, and identity lifecycle processes. This position conducts periodic access reviews, supports audits, maintains documentation, assesses access-related risks, and helps ensure access remains appropriate throughout the employee lifecycle while working closely with Cybersecurity, IT, Human Resources, SAP teams, Success Factors administrators, and business leaders.

• Plan, coordinate, and execute periodic user access reviews across enterprise systems, including Active Directory, Microsoft Entra , SAP, Success Factors, and M365
• Analyze user access to identify excessive, inappropriate, orphaned, privileged, elevated, or misaligned access; validate access with business owners, system owners, and managers; manage exceptions; track remediation; and support audit or compliance follow-up
• Advise stakeholders on access control processes, identity governance controls, proposed access models, role designs, segregation of duties concerns, and access-related risks
• Identify, assess, and support the remediation or mitigation of segregation of duties concerns by working with business owners, system owners, and process stakeholders to resolve access conflicts, define appropriate mitigating controls, track outcomes, and support audit or compliance requirements
  
  Recognize when access is not aligned with established processes or procedures, elevate concerns appropriately, ask clarifying questions, anticipate business needs, and recommend practical solutions
• Create and maintain procedures, SOPs, role ownership records, access review playbooks, role design standards, control documentation, and current-state/future-state process documentation
• Identify access governance gaps, inefficiencies, and control weaknesses; recommend practical process improvements; and support the design, testing, and improvement of automated processes for access assignments, access reviews, remediation tracking, and reporting
• Support Microsoft Purview policies, including Data Loss Prevention and Insider Risk Management; review related alerts; and elevate or track follow-up actions as required
• Monitor cybersecurity awareness training completion, follow up on overdue requirements, support compliance reporting, follow Cybersecurity escalation paths, respond to auditor questions, and demonstrate HSE and Quality behaviours aligned with Actively Caring and Road to Zero

• Education
  :
  Bachelor’s degree in Information Technology, Cybersecurity, Computer Science, Information Systems, or a related field
• Experience
  : 3–7 years of related experience in information technology, cybersecurity, help desk, systems administration, business analysis with exposure to identity and access management, cybersecurity governance, IT compliance, IT audit, information security, ERP environments, or work involving confidential and sensitive information. Experience with Entra Identity Governance, SAP Success Factors, SAP, and IT audit is an asset
• Certifications
  :
  Relevant cybersecurity, identity and access…