Alberta Blue Cross® is an Alberta based organization dedicated to delivering exceptional customer experience and community leadership. We’re committed to providing the best health coverage to over 1.8 million members and take an active role in promoting wellness. We believe in what we do—and place trust in our employees to deliver our vision.
Working at Alberta Blue Cross® means having a career where you’ll be recognized for your contributions. We value diversity, encourage our team members to maintain a healthy work-life balance and provide opportunities for career growth.
OVERVIEW:
We have an exciting opportunity for a Manager, Identity & Access Management to join our dynamic IT team. Reporting to the Director, IT Risk & Compliance, this position leads the program that controls who can access our systems and data, and what they can do once inside. The Manager oversees day-to-day access governance, including role design, access requests, segregation of duties, and periodic access reviews, and leads the modernization of how access is granted, changed, and removed, including the selection and implementation of an Identity Governance and Administration (IGA) platform.
This is a highly visible leadership role that partners closely with business managers, application teams, Identity Solutions, the service desk, human resources, cybersecurity, internal audit, and external auditors.
WHAT YOU WILL DO:
- Oversee access governance operations, including security business role design, access requests, exceptions, and segregation of duties (SoD) risk assessment and mitigation.
- Plan and run the quarterly user access review program, track completion and removals, and report results to leadership and executive committees.
- Set the IAM modernization roadmap, and lead requirements, selection, and implementation of an IGA platform.
- Automate joiner, mover, and leaver processes so access follows people’s employment status.
- Extend controls over privileged (administrator) accounts in partnership with Cybersecurity and Identity Solutions.
- Maintain access management standards and procedures, and define and report operating measures.
- Provide access control evidence for internal audits and the annual CSAE 3416 controls examination, and lead remediation of access-related findings.
- Guide business managers, application analysts, and project teams on least-privilege role design and access requirements for new systems.
- Lead, coach, and develop the Identity & Access Management team.
POSITION SCOPE:
- Oversee access governance across the organization’s applications, systems, and data.
- Lead the Identity & Access Management team.
- Own delivery of IGA platform selection and implementation within the approved budget, working with the vendor and implementation partner.
- Coordinate access processes with Identity Solutions, the Service Desk, Human Resources, and application teams.
- Represent Identity & Access Management in IT’s multi-year transformation program.
- Provide updates to the Director, IT leadership, and executive committees on access review results, access risks, and modernization progress.
KEY ACCOUNTABILITIES:
- Accountable for the design and operation of access governance, including roles, access reviews, and SoD controls.
- Accountable for delivering the IGA platform and automated access processes on scope, schedule, and budget.
- Ensure access is granted on a least-privilege basis and removed promptly when people change roles or leave.
- Ensure access review evidence is accurate, complete, and available to auditors.
- Ensure access exceptions and SoD risk acceptances follow governance processes and are properly documented.
- Develop team members and ensure high performance across the team.
KEY SUCCESS MEASURES:
- Quarterly access reviews completed on time, with identified removals actioned.
- IGA platform implemented on schedule and on budget, with priority applications connected.
- Reduced time to remove access for departing staff, and less manual access work.
- SoD conflicts identified and either resolved, mitigated, or formally accepted.
- On-time remediation of access-related audit findings, with no repeat findings in the annual controls examination.
WHAT YOU WILL HAVE:
- Bachelor’s degree or equivalent in computer science, information systems, information security, or a related field.
- 8+ years of progressive experience in identity and access management, access governance, information security, or IT audit.
- 3+ years of leadership experience managing teams.
- A professional designation such as CISSP, CISA, or CRISC; an IGA platform or identity management certification is an asset.
- Experience running user access reviews and SoD assessments in an audited or regulated organization.
- Experience leading the selection or implementation of an IGA platform or a comparable enterprise system.
- Deep knowledge of role-based access control, least privilege, the identity lifecycle, privileged access management, single sign-on, multi-factor authentication, and directory services (Active Directory, Entra ID).
- Working knowledge of access control requirements in NIST, ISO 27001, COBIT, and CSAE 3416 / SOC reports.
- Knowledge of Alberta privacy and information legislation for health and personal information.
- Excellent communication skills, with the ability to explain access risk to non-technical leaders and offer practical alternatives.
- Demonstrated change leadership; guiding teams and business users through new processes and tools with clarity and empathy.
- Strong planning, organizing, and delegation skills, balancing daily access work, review cycles, and modernization projects.
- Ability to inspire and develop talent; build engaged teams through coaching, mentoring, and accountability.
COMPETENCY MATRIX:
Competency: Strategic Thinking
Description: Ability to translate access risk and business needs into a practical modernization roadmap.
Proficiency Level: Intermediate
Evidence: Roadmap milestones delivered according to plan.
Competency: Leadership
Description: Builds a capable team and leads the adoption of automated access processes.
Proficiency Level: Advanced
Evidence: Team outcomes and process adoption.
Competency: Analytical Skills
Description: Uses access data to identify excessive, conflicting, or unused access.
Proficiency Level: Advanced
Evidence: Quality of access reviews and resolution of segregation-of-duties (SoD) conflicts.
Competency: Collaboration
Description: Balances business access needs with risk considerations across teams.
Proficiency Level: Advanced
Evidence: Review completion rates and stakeholder feedback.
BEHAVIORAL INDICATORS:
Strategic thinking:
- Prioritizes the applications and processes where automation reduces the most risk and effort.
- Anticipates access impacts of new systems and organizational changes.
Leadership:
- Keeps daily access work steady while leading the team through modernization.
- Coaches team members and builds depth for future growth.
Analytical skills:
- Uses access data to challenge assumptions about who needs what.
- Summarizes access review results and risks clearly for executive decision making.
Collaboration:
- Works with business managers to find access solutions that keep work moving.
- Resolves disagreements by focusing on outcomes, not positions.
This position will remain open until October 16, 2026.
Alberta Blue Cross® is an inclusive employer committed to a workplace that reflects the diversity of the communities we serve. We empower and are advocates for our team members by welcoming, respecting and valuing their unique perspectives, backgrounds, and experiences.
We offer the opportunity to work in an innovative, high-energy team-focused environment. If you have the qualifications we are looking for, apply online at careers.ab.bluecross.ca
A criminal record check satisfactory to Alberta Blue Cross will be required as a condition of employment, following a conditional offer.
