Manager, Identity & Access Management – Information Technology

Alberta Blue Cross® is an Alberta based organization dedicated to delivering exceptional customer experience and community leadership. We’re committed to providing the best health coverage to over 1.8 million members and take an active role in promoting wellness. We believe in what we do—and place trust in our employees to deliver our vision. Working at Alberta Blue Cross® means having a career where you’ll be recognized for your contributions.

We value diversity, encourage our team members to maintain a healthy work-life balance and provide opportunities for career growth.

We have an exciting opportunity for a Manager, Identity & Access Management to join our dynamic IT team. Reporting to the Director, IT Risk & Compliance, this position leads the program that controls who can access our systems and data, and what they can do once inside. The Manager oversees day-to-day access governance, including role design, access requests, segregation of duties, and periodic access reviews, and leads the modernization of how access is granted, changed, and removed, including the selection and implementation of an Identity Governance and Administration (IGA) platform.

This is a highly visible leadership role that partners closely with business managers, application teams, Identity Solutions, the service desk, human resources, cybersecurity, internal audit, and external auditors.

• Oversee access governance operations, including security business role design, access requests, exceptions, and segregation of duties (SoD) risk assessment and mitigation.
• Plan and run the quarterly user access review program, track completion and removals, and report results to leadership and executive committees.
• Set the IAM modernization roadmap, and lead requirements, selection, and implementation of an IGA platform.
• Automate joiner, mover, and leaver processes so access follows people’s employment status.
• Extend controls over privileged (administrator) accounts in partnership with Cybersecurity and Identity Solutions.
• Maintain access management standards and procedures, and define and report operating measures.
• Provide access control evidence for internal audits and the annual CSAE 3416 controls examination, and lead remediation of access-related findings.
• Guide business managers, application analysts, and project teams on least-privilege role design and access requirements for new systems.
• Lead, coach, and develop the Identity & Access Management team.

Oversee access governance across the organization’s applications, systems, and data. Lead the Identity & Access Management team. Own delivery of IGA platform selection and implementation within the approved budget, working with the vendor and implementation partner. Coordinate access processes with Identity Solutions, the Service Desk, Human Resources, and application teams. Represent Identity & Access Management in IT’s multi-year transformation program. Provide updates to the Director, IT leadership, and executive committees on access review results, access risks, and modernization progress.

• Accountable for the design and operation of access governance, including roles, access reviews, and SoD controls.
• Accountable for delivering the IGA platform and automated access processes on scope, schedule, and budget.
• Ensure access is granted on a least-privilege basis and removed promptly when people change roles or leave.
• Ensure access review evidence is accurate, complete, and available to auditors.
• Ensure access exceptions and SoD risk acceptances follow governance processes and are properly documented.
• Develop team members and ensure high performance across the team.

• Quarterly access reviews completed…