{"id":1682446,"url":"https://alion.io/job/questrade-strategy-advisor-identity-access-management","title":"Strategy Advisor, Identity & Access Management","company":{"id":58127,"name":"Questrade","domain":"questrade.com","url":"https://alion.io/company/questrade","size_band":"1001-5000","is_staffing_agency":false,"employer_type":"direct","is_intermediary":false,"listed_via":null,"ats_vendor":"Dayforce","truth_index":{"grade":"A","score":95,"open_postings":13,"ghost_share":0,"stale_share":0,"repost_share":0,"time_to_fill_p50_days":67,"computed_at":"2026-10-15T05:46:00Z"}},"role":"Security","role_family":"Security","seniority":"staff","employment_type":null,"work_mode":"on_site","remote_scope":null,"remote_scope_basis":null,"remote_working_hours":null,"hiring_geo_confidence":"structured","locations":["North York, Canada"],"countries":["CA"],"hiring_countries":[],"hiring_countries_total":0,"salary":{"min":170000,"max":185000,"currency":"CAD","period":"year","gross":null,"usd_annual":129955},"salary_estimate":null,"experience_years_min":10,"visa_sponsorship":false,"relocation_package":false,"has_equity":false,"technologies":[{"name":"Active Directory","optional":false},{"name":"AI Agents","optional":false},{"name":"AWS","optional":false},{"name":"Azure","optional":false},{"name":"Crowdstrike","optional":false},{"name":"Delinea","optional":false},{"name":"GCP","optional":false},{"name":"IAM","optional":false},{"name":"Least Privilege","optional":false},{"name":"SOC 2","optional":false}],"status":"live","first_seen_at":"2026-09-25T04:00:00Z","employer_posted_date":"2026-10-02","last_verified_at":"2026-10-16T01:40:45Z","board_verified":true,"closed_at":null,"days_open":20,"trust":{"level":"ok","repost_count":null,"flags":[],"days_open":20},"description":"What’s in it for you as an employee of QFG?\nHealth & wellbeing resources and programs \nPaid vacation, personal, and sick days for work-life balance\nCompetitive compensation and benefits packages\nWork-life balance in a hybrid environment with at least 3 days in office\nCareer growth and development opportunities\nOpportunities to contribute to community causes\nWork with diverse team members in an inclusive and collaborative environment\n\nThis job posting is for an existing vacancy.\n\nWe’re looking for our next Strategy Advisor, Identity & Access Management. Could It Be You?\nThe Advisor, Identity & Access Management Strategy owns the enterprise identity strategy across Questrade Financial Group’s regulated entities. The role sets direction, standards and the multi-year roadmap for workforce identity, privileged access, identity governance and administration, and non-human identity (including Agentic Identity), and leads the IAM team that delivers them. It is accountable for the identity control environment meeting business, security and regulatory requirements in each QFG entity, and for the vendor decisions, governance and evidence that keep it there. This is a strategy and leadership role; deep technical execution is led by the Principal Engineer, Identity & Access Management, and other IAM team members, under this role’s direction.\nThis role operates within a CIRO-regulated dealer and an OSFI-regulated federal financial institution (FRFI) environment. Candidates must understand that entity segregation between Questrade Inc. and Questbank is a foundational architectural constraint.\n\nNeed more details? Keep reading…\nIn this role, responsibilities include but are not limited to:\nScope and boundaries\nOwning enterprise identity strategy, standards, roadmap and governance for workforce identity life-cycle, privileged access, IGA and non-human identity across all QFG entities.\nDelegating hands-on design and engineering execution to the Principal Engineer, IAM, and the IAM team. This role directs, prioritizes and is accountable for outcomes.\nClient identity (CIAM): this role defines and represents the security requirements, standards and controls that client-facing identity platforms must meet, and contributes to policy engine design to minimize account takeover risks. Platform delivery ownership follows the enterprise architecture decision on the CIAM target state.\nStrategy and roadmap\nOwning the Enterprise and Client IAM vision, strategy and multi-year roadmap across all QFG entities; aligning with business, technology and security strategy; secure executive approval and funding.\nLeading requirements-first selection of identity platforms and vendors: defining control requirements before evaluating products, running trade-off analysis, and recording decisions. No platform is adopted or retired without a documented decision.\nEntity governance and regulatory\nOwning the identity control and compliance posture of each QFG regulated entity separately, including entity-scoped design, evidence and reporting.\nMaintaining the identity dimensions of OSFI Guideline B-13, third-party access expectations under OSFI Guideline B-10, resilience considerations under OSFI Guideline E-21, and CIRO cybersecurity expectations, producing evidence in the form of auditors and regulators can test.\nSupporting OSFI supervisory reviews, CIRO examinations, SOC 2 examinations and internal audits for identity domains; driving remediation of identity findings to closure with named owners and committed dates.\nWorkforce and privileged identity\nSetting standards for access, authentication and authorization across the workforce: single sign-on, personal password management, MFA and authentication escalation, risk-based access, and the joiner-mover-leaver lifecycle.\nOwning privileged access program outcomes: vault coverage, credential rotation, JIT/JEA, session accountability and emergency access, with measurable targets and quarterly reporting.\nIdentity governance and administration\nOwning the IGA strategy: authoritative attribute sourcing from HR systems, the role and entitlement model, automated provisioning and deprovisioning, and access certification across all enterprise platforms, with check-and-balance controls for data quality, integrity and timeliness.\nNon-human and cloud identity\nOwning governance of non-human identity: service accounts, agentic identities, workload identities, API keys and secrets across on-premises, GCP, AWS, Azure and Microsoft Entra, including inventory, ownership, rotation and least privilege.\nMetrics and reporting\nOwning identity KPI and KRI targets and reporting to executive and Board audiences, using the measurement library maintained by the IAM team. Directing effort by risk, not evenly.\nPeople management\nLeading, developing and retaining the IAM team; setting goals aligned to strategy; addressing performance in a timely manner.\nForecasting resourcing against the roadmap and presenting evidence-based cases for changes.\nActing as the team’s advocate: removing blockers and securing the tools, processes and organizational support the team needs.\nBuilding succession depth and cross-training so that no identity capability depends on a single person.\nCollaboration and change\nPartnering with Enterprise Architecture, cloud and data leadership, DevSecOps, JSOC, Enterprise Fraud, GRC, Privacy, Legal, People & Culture and User Experience; resolving conflicting priorities and negotiating outcomes.\nSponsoring identity-related change programs across entities and building adoption through clear communication at executive and technical levels.\n\nSo are YOU our next Strategy Advisor, Identity & Access Management? You are if you…\nHave 10+ years of experience in cybersecurity with substantial IAM leadership, including ownership of an enterprise IAM strategy and leadership of multidisciplinary teams in financial services\nHave proven experience with end-to-end delivery of complex IAM programs — strategy through operationalization — in regulated environments\nHave deep experience working across privileged access management (Delinea), identity governance and administration (SailPoint), Microsoft Entra and the EMS E5 security stack, and identity threat detection (CrowdStrike Identity Protection): enough to set direction, challenge designs and hold vendors to account\nHave demonstrated proficiency in Hybrid Identity Architecture: governing complex identity environments spanning Active Directory (AD), Microsoft Entra (formerly Azure AD), and GCP federation\nHave experience governing non-human identity at scale: service accounts, secrets and workload identity across cloud providers\nHave working knowledge of OSFI Guidelines B-13, B-10 and E-21, CIRO cybersecurity expectations, PIPEDA and Quebec Law 25, or demonstrated ability to learn a new prudential regime quickly\nHave experience producing audit-ready evidence and interacting directly with auditors and regulators\nHave strong experience with budget planning and financial management for technology programs\nPossess Executive and Board-level verbal and written communication skills, at a standard suitable for regulator-facing documentation\nHave strong stakeholder management skills in a matrixed organization with ability to influence without direct authority and hold people to committed dates\nHave proven leadership experience to develop, coach and retain talent; addressing performance early; building morale, belonging and succession\nAre comfortable navigating ambiguity, separating relevant trends from hype and making sound decisions with incomplete information\n\nAdditional kudos if you…\nAre Bilingual - written and verbal fluency in English and French\nHold CISSP, CISM, IDPro CIDPRO, or vendor certifications (Delinea, SailPoint, Microsoft Entra)\n\nCompensation Information:\nBase salary range: $170,000 - $185,000\nThe final compensation package will be commensurate with the successful candidate's experience, skills, and geographic location (Canada). It includes a comprehensive benefits plan and a competitive incentive (bonus) program for Full-Time Permanent roles.\n\nSounds like you? Click below to apply!\n#LI-NP1","description_format":"text","description_chars":8164,"description_truncated":false,"requirements":{"experience_years_min":10,"management_years_min":null,"team_size_min":null,"manages_managers":false,"education":null,"security_clearance":false,"languages":[{"language":"French","level":"Advanced (C1)","optional":false},{"language":"English","level":"Advanced (C1)","optional":false}]},"benefits":[],"hiring_locations":[],"hiring_excludes":[],"relocation_offered":false,"industries":["Identity Management","Investing Apps & Robo-Advisors","Online Brokerage & Trading Platforms"],"lifecycle":[{"event":"open","at":"2026-10-02T09:49:19Z"}],"visa":[],"liveness":{"score":90,"band":"hot","label":"Hiring now","p_open":1,"p_active":0.899,"p_room":1,"age_days":20,"expected_fill_days":67,"reasons":["conf:3","velocity","win:early"],"computed_at":"2026-10-15T05:46:00Z"},"pay":{"stated_usd_annual":129955,"is_top_pay":false},"html_url":"https://alion.io/job/questrade-strategy-advisor-identity-access-management","json_url":"https://alion.io/job/questrade-strategy-advisor-identity-access-management.json","meta":{"generated_at":"2026-10-16T02:51:04Z","cache_seconds":300,"methodology":"https://alion.io/methodology","terms":"https://alion.io/terms","contact":"https://alion.io/contact","api":"https://alion.io/developers","about":"Alion is a live layer of people, companies and AI agents: who they are, whether they are real and active right now, what they do and how to work with them, readable by people and by agents and paid per call.","catalog":"https://alion.io/catalog.json","usage":{"tier":"crawler_verified","counted_by":"address","units_charged":1,"used_today":4328,"day_limit":null,"remaining_today":null,"minute_limit":300,"resets_at":"2026-10-17T00:00:00Z"}},"offers":[{"id":"company.slices","title":"One company in depth, by slice","status":"live","price":{"credits":0.02,"usd":0.002,"plus_per_slice":{"credits":0.05,"usd":0.005}},"unit":"per company, plus each slice with data","note":"the employer in depth","call":{"mcp_tool":"get_company","arguments":{"id":58127},"rest":"https://alion.io/mcp/rest/get_company?id=58127"},"human":"https://alion.io/catalog?offer=company.slices&for=job%2Fquestrade-strategy-advisor-identity-access-management"},{"id":"market.stats","title":"A market slice: pay, demand and time to fill","status":"live","price":{"credits":1,"usd":0.1},"unit":"per slice","note":"pay, demand and time to fill for this role and place","call":{"mcp_tool":"market_stats"},"human":"https://alion.io/catalog?offer=market.stats&for=job%2Fquestrade-strategy-advisor-identity-access-management"},{"id":"job.search","title":"Open jobs by role, technology, place, pay and visa","status":"live","price":{"credits":0.02,"usd":0.002},"unit":"per posting in a list","note":"similar open postings","call":{"mcp_tool":"search_jobs"},"human":"https://alion.io/catalog?offer=job.search&for=job%2Fquestrade-strategy-advisor-identity-access-management"},{"id":"company.verify","title":"Is this company real and active right now","status":"pilot","price":null,"unit":"per company","request":{"url":"https://alion.io/catalog/request","method":"POST","body":"{\"offer\": \"company.verify\", \"for\": \"job/questrade-strategy-advisor-identity-access-management\", \"note\": \"what you need it for\"}"},"human":"https://alion.io/catalog?offer=company.verify&for=job%2Fquestrade-strategy-advisor-identity-access-management"}]}