Business Analyst (CyberSecurity Access Management)

Business Analyst (CyberSecurity Access Management)

We are seeking an Access Management Specialist to support a public sector health system's transformation to a unified clinical information platform. This role focuses on developing and implementing a comprehensive Identity and Access Management framework and Role-Based Access Control model that will serve clinical, administrative, and support functions across the organization. The specialist will be responsible for ensuring that access controls are secure, auditable, and aligned with clinical workflows, privacy obligations, and patient safety requirements.

This position requires someone who can lead current-state assessments and future-state design activities to support the development of access management strategy, role catalogues, and governance processes. The role encompasses business analysis activities including requirements gathering, stakeholder engagement, workshop facilitation, and process documentation. The specialist will work across clinical, operational, privacy, cybersecurity, and technical teams to define access requirements, validate role designs, support access configuration, and coordinate operational readiness activities. Responsibilities include conducting user population analysis, facilitating role engineering workshops, developing access matrices and segregation-of-duties models, supporting access review processes, and presenting recommendations to governance committees and leadership.

Qualifications

• Bachelor's degree in Computer Science, Business Administration, Health Informatics, or a similar discipline, or an equivalent combination of education and experience
• 5+ years - business analysis experience including requirements gathering, workshop facilitation, use case analysis, business process analysis, detailed design activities, decision records, and business analysis documentation supporting large-scale healthcare or enterprise technology initiatives
• 3+ years - Identity and Access Management, access governance, or Role-Based Access Control experience
• 5+ years - working with clinical stakeholders, operational leaders, or healthcare organizations
• Proficiency with Microsoft Office products including Word, Excel, PowerPoint, Visio, and Teams
• 3+ years - supporting provider-based healthcare information systems, including large-scale Clinical Information System, Electronic Medical Record, or Electronic Health Record implementations

Nice to Have

• 3+ years - leading RBAC design, role engineering, or access governance initiatives in healthcare environments
• 3+ years - supporting implementation of large-scale Clinical Information Systems
• 3+ years - translating clinical workflows into access and security requirements
• 3+ years - developing role catalogues, access matrices, and segregation-of-duties models
• 3+ years - analyzing privacy legislation, access auditing, or patient information protection requirements
• 2+ years - conducting user population analysis, role mining, or entitlement analysis activities
• 2+ years - presenting recommendations to executives, directors, clinical leaders, and governance committees
• Healthcare experience in the work location region
• Verbal and written communication, facilitation, and presentation skills in both French and English

This is a remote position.