CyberArk IAM Analyst

Role Description

CyberArk IAM Analyst

Who We Are

Born digital, UST transforms lives through the power of technology. We walk alongside our clients and partners, embedding innovation and agility into everything they do. We help them create transformative experiences and human-centered solutions for a better world.

UST is a mission-driven group of 29,000+ practical problem solvers and creative thinkers in more than 30 countries. Our entrepreneurial teams are empowered to innovate, act nimbly, and create a lasting and sustainable impact for our clients, their customers, and the communities in which we live.

With us, you’ll create a boundless impact that transforms your career—and the lives of people across the world.

Visit us at UST.com.

You Are

An experienced IAM professional who can provision, modify, and decommission privileged credentials in CyberArk, support access reviews and audits, and communicate clearly with both technical and non-technical stakeholders.

Key skills: CyberArk, Privileged Access Management, Linux

The Opportunity

This role is a critical component in maintaining the cybersecurity posture of a large financial institution by ensuring that the right users have the right privileged access at the right time. The CyberArk IAM Analyst works at the intersection of security operations, access governance, and business enablement, supporting privileged credential provisioning, lifecycle management, and compliance across enterprise platforms. This role is operational and analytical in nature, requiring close collaboration with application teams, infrastructure teams, security engineers, and business stakeholders to ensure secure, compliant, and timely onboarding of privileged access into CyberArk Privileged Access Management (PAM).

What You’ll Do

Privileged Access & Credential Management:

• Provision, modify, and decommission privileged credentials across enterprise platforms including Active Directory, Windows, Unix/Linux, Databases, and Applications.
• Onboard and manage privileged accounts into the CyberArk Privileged Access Suite, including Enterprise Password Vault (EPV), Password Vault Web Access (PVWA), Central Password Manager (CPM), and Privileged Session Manager (PSM).
• Perform safe creation, policy configuration, and access reviews within CyberArk.
  
  

IAM Operations & Controls

• Execute add / remove / change access requests in alignment with bank IAM policies and security standards.
• Review and validate privileged users, groups, and access entitlements on a periodic basis.
• Ensure ongoing compliance with Identity & Access Management controls, audit requirements, and internal security standards.
• Support access recertification, audits, and control attestations.
  
  

Stakeholder & Request Management

• Act as a key point of contact for access-related requests from application teams, infrastructure teams, and security stakeholders.
• Work closely with requestors to gather requirements, validate approvals, and ensure successful onboarding.
• Prioritize and manage requests based on risk, urgency, and business impact.
• Communicate clearly with stakeholders regarding request status, issues, and remediation steps.
  
  

Risk, Audit & Governance Support

• Support internal and external security audits, risk assessments, and compliance reviews.
• Assist with documentation of IAM processes, procedures, and control evidence.
• Identify gaps in access controls and recommend remediation actions.
• Ensure alignment with bank policies, regulatory expectations, and industry best practices.
  
  

This position description identifies the responsibilities and tasks typically associated with the performance of the position. Other relevant essential functions may be required.

Required

What you need:

• Hands-on experience with CyberArk Privileged Access Management, including credential onboarding and lifecycle management, safe creation and access configuration, and PVWA, CPM, and PSM operations.
• Strong understanding of privileged access provisioning and access governance.
• Working knowledge of enterprise platforms, including Active Directory, Windows and Unix/Linux, and databases and application service accounts.
• Understanding of authentication, authorization, and access control concepts.
• Solid understanding of the Identity & Access Management lifecycle.
• Familiarity with security and technology standards across infrastructure and applications.
• Strong analytical mindset with the ability to research, assess, and resolve access-related issues.
• Ability to interpret policies, requirements, and approvals and translate them into technical actions.
• Detail-oriented with a strong focus on accuracy, controls, and compliance.
• Strong written and verbal communication skills, and comfort working with both technical teams and non-technical stakeholders.
• Proactive, organized, and capable of working independently while supporting multiple request streams.
  
  

Preferred

• Experience operating within financial services or regulated environments.
• CyberArk Trustee or related certification.
• Experience supporting audits, access reviews, or compliance initiatives.
• Familiarity with PowerShell or scripting (supporting / operational level).
• Exposure to endpoint or security tooling.
  
  

Compensation can differ depending on factors including but not limited to the specific office location, role, skill set, education, and level of experience. UST provides a reasonable range of compensation for roles that may be hired in various U.S. markets as set forth below.

Role Location: Toronto, Canada

Compensation Range: 95,000 CAD - 119,000 CAD

Benefits

Full-time, regular employees accrue a minimum of 10 days of paid vacation per year, receive 6 days of paid sick leave each year (pro-rated for new hires throughout the year), paid holidays, and are eligible for paid bereavement leave and jury duty. They and their dependents residing in Canada are eligible for Supplemental Healthcare coverage, as well as Company-paid Employee Only basic life insurance and accidental death and dismemberment coverage.

Full-time temporary employees receive 6 days of paid sick leave each year (pro-rated for new hires throughout the year). They and their dependents residing in Canada are eligible for Supplemental Healthcare coverage, as well as Company-paid Employee Only basic life insurance and accidental death and dismemberment coverage.

Part-time regular and temporary employees receive 6 days of paid sick leave each year (pro-rated for new hires throughout the year).

All Canadian employees who work in a province, territory or locality with more generous paid sick leave benefits than specified here will receive the benefit of those sick leave laws.

Artificial Intelligence in Recruitment

As part of our recruitment process, UST may use AI or automated tools to support activities such as application screening, scheduling, or interview assistance. All hiring decisions are made by our recruitment team. Where applicable law requires it, further notice will be provided separately.

L’intelligence artificielle en soutien au recrutement

Dans le cadre de son processus de recrutement, il se peut que UST peut utiliser ait recours à l'intelligence artificielle ou à des outils automatisés réaliser des en soutien à des activités telles que l’examen comme la présélection des candidatures, la planification ou l'assistance lors des entrevues ou leur bon déroulement. Toutes les décisions d'embauche sont prises par notre équipe de recrutement. Lorsque la législation applicable l'exige, un avis supplémentaire à cet égard sera fourni séparément.

What We Believe

We proudly embrace the values that have shaped UST since day one. We build our culture of Humility, Humanity, and Integrity. These values inspire us to nurture a people-first, human centric culture that fosters diversity, prioritizes sustainable solutions, and keeps our people and clients at the forefront of all decisions.

Humility

We will listen, learn, be empathetic and help selflessly in our interactions with everyone.

Humanity

Through business, we will better the lives of those less fortunate than ourselves.

Integrity

We honor our commitments and act with responsibility in all our relationships.

An Equal Opportunity Workplace, Free of Discrimination and Harassment

At UST, we strive to provide a work environment free of discrimination and harassment. We are an equal opportunity employer, and employment decisions are based on merit and business needs. Our Human Rights Policy further illustrates our stand on this. We are committed to following fair employment practices that provide equal opportunities to all employees. We do not discriminate or allow harassment on the basis of race, color, religion, disability, gender, national origin, sexual orientation, gender identity, gender expression, age, genetic information, military status, or any other legally protected status. At UST, we value diversity and believe that a diverse workplace builds a competitive advantage.

Un lieu de travail à égalité des chances, sans Discrimination et harcèlement

Chez UST, nous nous efforçons de fournir un environnement de travail exempt de discrimination et harcèlement. Nous sommes un employeur garantissant l'égalité des chances et des décisions en matière d'emploi sont basés sur le mérite et les besoins de l'entreprise. Notre politique en matière de droits de l'homme illustre notre position à ce sujet. Nous nous engageons à respecter un emploi équitable des pratiques qui offrent des chances égales à tous les employés. Nous ne faisons pas discriminer ou permettre le harcèlement sur la base de la race, de la couleur, de la religion, du handicap, genre, origine nationale, orientation sexuelle, identité de genre, expression de genre, âge, informations génétiques, statut militaire ou tout autre statut légalement protégé. Chez UST, nous valorisons la diversité et pensons qu'un lieu de travail diversifié crée un avantage compétitif.

UST reserves the right to periodically redefine your roles and responsibilities based on the requirements of the organization and/or your performance.

#UST

Skills

CyberArk, Privileged Access Management, Linux