Senior Analyst, Identity Governance & Priviliged Access Management

Connor, Clark & Lunn Financial Group (CCLFG), one of Canadas leading asset managers, is seeking a Senior Analyst, Identity Governance & Privileged Access Management (IGA/PAM) to join our Center of Excellence (CoE) Information Security in Gurugram. The Information Security team is responsible for securing and governing access to critical systems and data across the organization. This role will lead key initiatives related to Identity Governance and Administration (IGA), Privileged Access Management (PAM), user lifecycle management, access governance, and identity security modernization. If you are passionate about reducing identity-related risk, implementing scalable access controls, and driving improvements to identity security processes, this may be the right opportunity for you. The successful candidate will collaborate with teams across Canada and India and play a key role in the ongoing implementation and operation of the organization's IAM program and reporting to the Information Security Manager based in Gurugram. What You Will Do Identity Governance and Administration Lead the implementation, administration, operation, and continuous improvement of the Saviynt Identity Cloud platform, including application onboarding, connector integration, configuration, and platform health monitoring.Design, implement, and maintain role-based and attribute-based access control models (RBAC and ABAC), access governance standards, and entitlement structures.Develop and maintain automated Joiner, Mover, and Leaver (JML) workflows that provision, modify, and deprovision access based on HR, directory, and other authoritative system events.Transition manual User Access Review (UAR) and certification campaigns to automated, periodic, and event-driven processes.Coordinate access reviews, entitlement certifications, and remediation activities, ensuring findings are tracked to closure and supported by audit-ready evidence.Build and optimize access request workflows, approval routing, and rules-based provisioning processes to reduce manual effort, prevent access creep, and improve the user experience.Identify and support the remediation of excessive privileges, orphaned accounts, inappropriate entitlements, Segregation of Duties (SoD) conflicts, and other identity-related risks.Integrate the IGA platform with HR systems, directories, cloud platforms, SaaS applications, and adjacent identity controls, including Privileged Access Management (PAM), Single Sign-On (SSO), and multifactor authentication (MFA).Troubleshoot identity workflows, provisioning processes, connector integrations, and platform configuration issues.Identify opportunities to improve IAM processes through automation, workflow optimization, analytics, and responsible use of AI. Privileged Access Management Administer, operate, and expand CyberArk/Idira Privileged Access Management capabilities, including privileged account discovery, onboarding, credential management, access workflows, and policy enforcement.Collaborate with infrastructure, application, cloud, and security teams to onboard privileged accounts, applications, and technology platforms into CyberArk.Monitor privileged access activity and investigate access-related security events, anomalous behaviour, and policy violations.Support the implementation and ongoing improvement of privileged access controls aligned with least privilege, Zero Trust, and regulatory requirements.Identify unmanaged, shared, dormant, or high-risk privileged accounts and coordinate their remediation.Support the integration of CyberArk with identity governance, directory, cloud, and security-monitoring platforms. Governance, Reporting, and Advisory Develop metrics, dashboards, and reports covering identity governance, access certifications, JML performance, privileged account coverage, policy compliance, and remediation status.Produce documentation and evidence to support internal audits, external audits, risk assessments, and regulatory reviews.Act as a subject-matter expert and provide guidance to technical and business teams on identity security, access governance, and privileged access management best practices.Partner with business stakeholders, application owners, technology teams, Risk, Compliance, and Internal Audit to implement sustainable identity controls.Lead identity security initiatives, drive process improvements, and contribute to the evolution of the organizations IAM governance framework. What You Bring Five or more years of relevant experience in Identity and Governance Administration, cybersecurity, or information security.Hands-on experience implementing or administering an IGA platform, preferably Saviynt Identity Cloud.Demonstrated experience designing and automating Joiner, Mover, and Leaver processes and managing User Access Review and certification campaigns in a production environment.Strong understanding of Identity Governance and Administration, Privileged Access Management, RBAC .