Sr IT Security Analyst #100850

Sr IT Security Analyst #100850

Request ID: 100850-1
Start/End Dates: 4/9/2026 - 1/5/2027
Work Location: downtown Toronto, near TTC and GO
Job Title: IT - Info Security Analyst - Expert

Position Title: It Security Analyst
Line of Business: Privileged Identity & Access Services (PIAS) / Information Security

Target Start Date: April 6
Duration: 9 Months
Potential for this contract to be extended or converted to FTE? Extension: Yes / Conversion: Possible

Hybrid work - in office 1day/week + last Friday
Office Location: 81 Bay Street /
Work Schedule (hours per week, start time): 9-5 / 37.5hrs

Potential for OT? No
Target rate range: $75-90hr on B2B

What does the LOB do: The PIAS team sits within the Cyber organization and owns enterprise Privileged Access Management (PAM) and broader Identity & Access Management (IAM) capabilities. The team acts as the technical business arm of IAM bridging security tooling, infrastructure teams, and business account owners.

Key responsibilities of the LOB include:
• Owning privileged access across servers and environments (including DMZ and non DMZ)
• Ensuring privileged accounts are properly vaulted, governed, and compliant
• Driving IAM/PAM process improvements across multiple portfolios
• Partnering with application, infrastructure, and business teams to remediate access gaps and onboard privileged accounts to standard solutions

Role reports to: Senior Manager
Reason the role is open: Contract support required to augment the PIAS team due to increased demand on IAM and PAM initiatives, ongoing security projects, and process improvement efforts.
Are you currently working with any agencies on resourcing? No

What project will this contractor be working on?
This role will support a Privileged Access Management remediation and onboarding initiative.
Key project activities include:
• Identifying and analyzing unvaulted privileged access across servers and environments (including behind DMZs)
• Engaging account and application owners to understand how access is used, why it is required, and what risks exist
• Translating business and technical needs into vaulted account requirements
• Coordinating with multiple technology teams involved in:
Provisioning
Validation
PAM onboarding
• Supporting onboarding of human privileged access (CyberArk) and limited non human access (HashiCorp Vault – exposure may be minimal but possible)
• Producing technical and procedural documentation
• Driving process enhancements and improvements across PAM portfolios that may extend beyond this single initiative
This is a hands on, coordination heavy role requiring both technical PAM knowledge and strong business analysis capability.

Selling points of the positions:
Opportunity to work on enterprise-level Identity & Access Management and Privileged Access initiatives
Exposure to industry-leading security tools such as CyberArk and HashiCorp Vault
High visibility role working with senior stakeholders and multiple LOBs
Strong learning environment with defined IAM/PAM career pathing
Potential extension and longer-term opportunities

Job Description:
The IT Security Analyst (L7) will function as a technical Business Analyst and PAM subject matter partner for Privileged Identity & Access initiatives. The role requires deep understanding of privileged access concepts, the ability to engage business and technical stakeholders, and the skills to drive onboarding, remediation, documentation, and process improvements.

This individual will assess current privileged access usage, work with account owners to define secure access requirements, and coordinate onboarding into standardized PAM solutions (primarily CyberArk). The role also contributes to broader IAM/PAM process maturity.

Must Have Requirement:
8–10+ years of experience across IT, Security, or IAM/PAM roles
Strong experience acting as a technical Business Analyst
Direct experience with Privileged Access Management concepts
Hands on experience or strong working knowledge of CyberArk
Ability to analyze existing access, assess risk, and translate needs into requirements
Experience coordinating across multiple technology and business teams
Strong documentation skills (technical + procedural)

Nice to Have:
Experience with HashiCorp Vault (especially non human privileged access)
IAM/PAM experience in a financial institution or regulated environment
Security certifications (CISSP, CISM, CRISC, CCSP – asset)

Soft Skills:
Strong stakeholder engagement and communication skills
Ability to run effective meetings, coordinate contributors, and capture actions
Comfortable working with ambiguity and incomplete information
Strong written communication and documentation capability
Confident, mature professional-not a junior L7

NOTE
Close on March 20 at 4 pm.
G.G. Consulting Group uses advanced ATS systems to track and manage candidates and jobs. We do not use AI tools for candidate screening.