Senior Healthcare IAM / RBAC Business Analyst

Job Description: Senior Healthcare IAM / RBAC Business Analyst

Client: Service New Brunswick (SNB) – Symbio Clinical Information System (CIS) Program
Location: Remote – New Brunswick (Quarterly travel required)
Contract Duration: November 30, 2026 – November 30, 2028
Extension: Two optional one-year extensions
Schedule: Full-time, 7.5 hours/day, Monday–Friday
Working Hours: 8:15 AM – 4:30 PM Atlantic Time (AST)
Maximum Rate: $100 CAD/hour

Position Overview

Service New Brunswick is seeking an experienced Access Management Specialist – Business Analyst Level 3 (BA3) to support the development and implementation of the Identity and Access Management (IAM) and Role-Based Access Control (RBAC) framework for its provincial Symbio Clinical Information System (CIS) program.

The successful candidate will work with clinical, operational, privacy, cybersecurity, HR and technical teams to establish secure and scalable access management processes across the provincial healthcare system.

The role requires strong healthcare business analysis experience combined with hands-on IAM, RBAC, access governance and clinical information systems expertise.

Key Responsibilities

• Develop and support the implementation of IAM strategies and RBAC frameworks for healthcare systems.

• Identify, define and validate clinical, administrative, financial and support user roles.

• Develop and maintain role catalogues, access matrices, role definitions and role-to-function mappings.

• Apply least-privilege access principles and Segregation of Duties (SoD).

• Define user provisioning, access modification, suspension and deprovisioning requirements.

• Support emergency/Break-Glass access and periodic access review processes.

• Conduct business requirements gathering, stakeholder interviews and discovery workshops.

• Prepare BRDs, functional and non-functional requirements, use cases and process documentation.

• Develop current-state and future-state workflows, process maps and requirements traceability matrices.

• Collaborate with clinical, privacy, cybersecurity, IAM and technical teams to establish access governance policies and procedures.

• Perform user population analysis, role mining and entitlement assessments to identify access conflicts and excessive privileges.

• Support CIS security configuration, access validation, UAT and go-live readiness.

• Prepare executive reports, recommendations, risk logs and governance presentations.

• Support operational transition, knowledge transfer and mentoring of internal program resources.

Requirements

Mandatory Qualifications

Candidates must demonstrate the following:

1. Education: Bachelor's degree in computer science, Business Administration, Health Informatics or a related discipline. Equivalent education and professional experience may be considered.

2. Business Analysis: Minimum 5 years of experience in business analysis, including requirements gathering, workshop facilitation, use case analysis, process mapping and business documentation.

3. IAM/RBAC: Minimum 3 years of experience working with Identity and Access Management (IAM), Role-Based Access Control (RBAC) or access governance.

4. Healthcare Experience: Minimum 5 years of experience working with healthcare organizations, clinical stakeholders or operational leaders.

5. Microsoft Office: Proficiency in Word, Excel, PowerPoint, Visio and Teams.

6. Healthcare Information Systems: Minimum 3 years of experience supporting healthcare CIS, EMR or EHR implementations.

Preferred / Desirable Qualifications

• 3+ years of experience designing and implementing healthcare RBAC frameworks and access governance models.

• Experience with large-scale provincial Clinical Information System (CIS) implementations.

• Experience translating clinical workflows into security and access management requirements.

• Experience developing role catalogues, access matrices, role definitions and SoD models.

• Knowledge of healthcare privacy legislation, PHIPA/HIPAA, access auditing and patient information protection.

• Experience with user population analysis, role mining and entitlement analysis.

• Experience presenting recommendations to executives, clinical leaders and governance committees.

• Previous experience with New Brunswick healthcare organizations, including Horizon, Vitalité or SNB.

• French and English bilingual communication skills are an asset.

Key Technical Skills & Expertise

• Identity and Access Management (IAM)

• Role-Based Access Control (RBAC)

• Access Governance and Role Engineering

• Clinical Information Systems (CIS), EMR and EHR

• User Provisioning and Deprovisioning

• Access Reviews and Recertification

• Segregation of Duties (SoD)

• Privileged and Emergency/Break-Glass Access

• Role Catalogues and Access Matrices

• Healthcare Privacy and Security Compliance

• Business Requirements Documentation (BRD/FRD)

• Process Mapping, UAT and Requirements Traceability

Key Deliverables

• Current-state access assessment and process documentation.

• Business, functional and non-functional requirements.

• Clinical, administrative and financial role catalogues.

• RBAC access matrices and role-to-function mappings.

• Access governance framework and approval workflows.

• User provisioning and deprovisioning processes.

• Break-Glass and privileged access requirements.

• Risk, issue and decision logs.

• Access configuration validation and UAT documentation.

• Go-live readiness and transition-to-operations documentation.

Engagement Requirements

• Fully remote engagement with availability to travel to New Brunswick at least once per quarter.

• Must be available during New Brunswick business hours (AST).

• Successful candidate must sign an NDA before starting.

• Knowledge transfer and mentoring of New Brunswick program personnel are expected.

Ideal Candidate: A Senior Healthcare Business Analyst, IAM Business Analyst or Access Management Specialist with proven hands-on experience in healthcare IAM/RBAC, clinical systems implementation, access governance and clinical security requirements.