Director, Cyber Security - Identity & Access Management

Come make your difference in communities across Canada, where authenticity, trust and making connections is valued – as we shape the future of Canadian retail, together. Our unique position as one of the country's largest employers, coupled with our commitment to positively impact the lives of all Canadians, provides our colleagues a range of opportunities and experiences to help Canadians Live Life Well®.

At Loblaw Companies Limited, we succeed through collaboration and commitment and set a high bar for ourselves and those around us. Whether you are just starting your career, re-entering the workforce, or looking for a new job, this is where you belong.

The Impact You'll Make:
Does leading one of Canada's most complex identity ecosystems excite you? Loblaw Technology supports corporate offices, stores, pharmacies, distribution centres, digital properties, SaaS platforms, and multi-cloud environments. This role will lead the strategy, engineering, and reliable operation of identity controls that securely connect colleagues, suppliers, administrators, applications, and non-human identities. Lead a team that values diverse ideas, builds secure and resilient services, and develops our talent from within. You will have the opportunity to modernize enterprise identity at scale and make a measurable difference to security, colleague experience, and business operations.

• Lead Loblaw's enterprise identity and access management strategy, architecture, engineering, and operations across workforce, supplier, privileged, service, and machine identities.
• Own the roadmap and lifecycle for Active Directory, Microsoft Entra ID, SailPoint, CyberArk, Okta, federation services, and identity integrations, ensuring these platforms remain secure, resilient, supported, and fit for purpose.
• Establish reliable joiner, mover, and leaver controls across HR source systems and downstream applications, with clear service levels, reconciliation, exception management, and timely deprovisioning.
• Modernize authentication through phishing-resistant MFA, FIDO2/passkeys, Conditional Access, identity risk controls, and passwordless access while retiring legacy authentication methods and protocols.
• Lead privileged access management, including CyberArk vaulting and rotation, privileged sessions, break-glass access, service accounts, application secrets, SSH keys, and administrator authentication.
• Strengthen Active Directory and Entra governance by addressing orphaned and disabled accounts, weak passwords, stale access, privileged groups, service account ownership, role design, segregation of duties, and access certifications.
• Build a resilient IAM operating model covering capacity, high availability and disaster recovery, monitoring, incident/change/problem management, automation, runbooks, and after-hours coverage.
• Embed identity as a foundational Zero Trust control by partnering across HR, application, cloud, network, endpoint, data, SOC, infrastructure, operations, privacy, legal, and audit teams.
• Own IAM vendors, managed services, licensing, budgets, and investment roadmaps; report service health, control effectiveness, risks, and decisions to executive stakeholders.
• Lead and develop a multidisciplinary team of identity architects, engineers, product owners, analysts, and operations specialists, building succession, documentation, and two-deep coverage for critical services.

• Progressive experience in identity and access management, cybersecurity, or enterprise infrastructure, including leading technical teams or major IAM programs.
• Demonstrated success leading IAM in a large, complex, multi-site enterprise, ideally within retail, healthcare, financial services, telecommunications, or another regulated environment.
• Deep knowledge of Active Directory, Microsoft Entra ID, SailPoint, CyberArk, Okta, and identity integration standards such as SAML, OAuth 2.0, OpenID Connect, SCIM, LDAP, Kerberos, federation, and APIs.
• Proven experience designing and operating joiner, mover, and leaver processes integrated with HR platforms such as Workday or Ceridian, including data-quality, reconciliation, and downstream provisioning controls.
• Expertise in Conditional Access, phishing-resistant MFA, FIDO2/passkeys, passwordless authentication, identity risk, Zero Trust access, and legacy authentication decommissioning.
• Strong privileged-access and non-human identity experience, including vaulting, credential rotation, session monitoring, service accounts, secrets, SSH keys, break-glass accounts, and machine identity governance.
• Experience establishing identity governance, RBAC/ABAC, segregation of duties, access reviews, role mining, policy frameworks, and evidence aligned with NIST, ISO 27001, CIS Controls, and applicable regulatory obligations.
• Strong operational leadership across high availability, disaster recovery, capacity, monitoring, incident/problem/change management, automation, and service-level management for business-critical IAM platforms.
• Excellent executive communication, stakeholder management, financial management, and vendor leadership skills, with the ability to translate complex identity risks into clear decisions and measurable outcomes.
• Bachelor's or Master's degree in Computer Science, Information Security, Engineering, Information Systems, or a related field. Certifications such as CISSP, CISM, CRISC, Microsoft SC-300/SC-100, SailPoint, CyberArk, or Okta are strong assets.

Our commitment to Sustainability and Social Impact is an essential part of the way we do business, and we focus our attention on areas where we can have the greatest impact. Our approach to sustainability and social impact is based on three pillars – Environment, Sourcing and Community – and we are constantly looking for ways to demonstrate leadership in these important areas. Our CORE Values – Care, Ownership, Respect and Excellence – guide all our decision-making and come to life through our Blue Culture. We offer our colleagues progressive careers, comprehensive training, flexibility, and other competitive benefits – these are some of the many reasons why we are one of Canada’s Top Employers, Canada’s Best Diversity Employers, Canada’s Greenest Employers & Canada’s Top Employers for Young People.

If you are unsure whether your experience matches every requirement above, we encourage you to apply anyway. We are looking for varied perspectives which include diverse experiences that we can add to our team.

We have a long-standing focus on diversity, equity and inclusion because we know it will make our company a better place to work and shop. We are committed to creating accessible environments for our colleagues, candidates and customers. Requests for accommodation due to a disability (which may be visible or invisible, temporary or permanent) can be made at any stage of application and employment. We encourage candidates to make their accommodation needs known so that we can provide equitable opportunities.
Please Note:
Candidates who are 18 years or older are required to complete a criminal background check. Details will be provided through the application process.

Hiring Range / Échelle salariale à l’embauche :

$128,000.00 - $176,000.00 / 128.000,00$ - 176.000,00$ (per year / par an)

A candidate’s experience and knowledge as well as the geographical region in which the position is located may be factored into the pay a candidate receives for this position. This posting is for an existing vacancy. The Company uses artificial intelligence for the purpose of screening, assessing and/or selecting applicants for this position. / L’expérience et les connaissances d’un candidat ainsi que la région géographique dans laquelle le poste est situé peuvent être prises en compte dans la rémunération qu’un candidat reçoit pour ce poste. Cette offre d’emploi concerne un poste vacant existant. L’entreprise utilise l’intelligence artificielle dans le but de filtrer, d’évaluer et/ou de sélectionner les candidats à ce poste.

#EN

#SS #LTnA #ON