Business Analyst (Cybersecurity Access Management)

Business Analyst (CyberSecurity Access Management)
We are seeking an Access Management Specialist to support a public sector health system's transformation to a unified clinical information platform. This role focuses on developing and implementing a comprehensive Identity and Access Management framework and Role-Based Access Control model that will serve clinical, administrative, and support functions across the organization. The specialist will be responsible for ensuring that access controls are secure, auditable, and aligned with clinical workflows, privacy obligations, and patient safety requirements. This position requires someone who can lead current-state assessments and future-state design activities to support the development of access management strategy, role catalogues, and governance processes. The role encompasses business analysis activities including requirements gathering, stakeholder engagement, workshop facilitation, and process documentation. The specialist will work across clinical, operational, privacy, cybersecurity, and technical teams to define access requirements, validate role designs, support access configuration, and coordinate operational readiness activities.Responsibilities
conducting user population analysisfacilitating role engineering workshopsdeveloping access matrices and segregation-of-duties modelssupporting access review processespresenting recommendations to governance committees and leadershipQualifications
Bachelor's degree in Computer Science, Business Administration, Health Informatics, or a similar discipline, or an equivalent combination of education and experience5+ years - business analysis experience including requirements gathering, workshop facilitation, use case analysis, business process analysis, detailed design activities, decision records, and business analysis documentation supporting large-scale healthcare or enterprise technology initiatives3+ years - Identity and Access Management, access governance, or Role-Based Access Control experience5+ years - working with clinical stakeholders, operational leaders, or healthcare organizationsProficiency with Microsoft Office products including Word, Excel, PowerPoint, Visio, and Teams3+ years - supporting provider-based healthcare information systems, including large-scale Clinical Information System, Electronic Medical Record, or Electronic Health Record implementationsNice to Have
3+ years - leading RBAC design, role engineering, or access governance initiatives in healthcare environments3+ years - supporting implementation of large-scale Clinical Information Systems3+ years - translating clinical workflows into access and security requirements3+ years - developing role catalogues, access matrices, and segregation-of-duties models3+ years - analyzing privacy legislation, access auditing, or patient information protection requirements2+ years - conducting user population analysis, role mining, or entitlement analysis activities2+ years - presenting recommendations to executives, directors, clinical leaders, and governance committeesAdditional Requirements
Healthcare experience in the work location regionVerbal and written communication, facilitation, and presentation skills in both French and English
#J-18808-Ljbffr