Yes. The user's password should be reset immediately and sign-in access blocked as soon as they leave the organisation.

It's also important to review any shared accounts, administrative permissions and third-party applications they had access to. Removing unnecessary permissions helps reduce security risks.