Sr. Officer - Identity and Access Management

Job Purpose:

To support the implementation, administration, and ongoing operation of the organization's Identity and Access Management (IAM) processes and solutions. The role is responsible for ensuring that users have appropriate, timely, and secure access to systems, applications, and information based on their roles and business requirements, while maintaining compliance with information security policies, internal controls, and regulatory requirements.

The position will support user lifecycle management, access provisioning and de-provisioning, access reviews, privileged access controls, identity governance, and IAM-related monitoring and reporting.

Key Responsibilities & Accountabilities:

• Manage the complete user identity lifecycle, including joiner, mover, and leaver (JML) processes, ensuring timely creation, modification, and deactivation of user accounts.

• Process and administer user access requests in accordance with approved.

• Manage user roles, permissions, and entitlements across systems and applications, ensuring access is aligned with business responsibilities and job requirements.

• Conduct periodic user and application access reviews, coordinate with business and application owners, and ensure inappropriate or excessive access is promptly removed.

• Support the administration, monitoring, and periodic review of privileged and administrative accounts, ensuring appropriate authorization and control of elevated access.

• Monitor IAM activities and investigate access, authentication, provisioning, and authorization issues, ensuring timely resolution and escalation of security-related incidents.

• ensure IAM activities comply with organizational policies, security standards, regulatory requirements, and audit controls, while maintaining appropriate documentation and evidence.

• Identify and address access conflicts, excessive privileges, and segregation-of-duties (SoD) violations, escalating significant risks to the appropriate stakeholders.

• Maintain accurate IAM records, access matrices, procedures, audit trails, and management reports, including key IAM metrics and outstanding exceptions.

• Identify opportunities to enhance IAM processes, workflows, controls, and automation to improve security, efficiency, and user experience.

• Collaborate with HR, IT, Information Security, application owners, and business teams to resolve access requirements, support IAM projects, and promote effective identity and access governance.

• Maintain IAM procedures, work instructions, access matrices, and other relevant documentation.

• Ensure knowledge management and appropriate documentation of IAM processes and technical solutions.

Qualifications & Experience:

• Bachelor's degree in computer science, Information Technology, Cybersecurity, Information Security, or a related discipline.

• 3+ years of experience in Information Security, preferably within an Identity and Access Management function.

• Hands-on experience in user account administration, identity lifecycle management, access provisioning, modification, and de-provisioning.

• Good experience in managing user roles, permissions, entitlements, and access controls across enterprise systems and applications.

• Experience conducting user access reviews, entitlement certifications, access recertification, and remediation of inappropriate or excessive access.

• Working knowledge or experience in managing privileged accounts and access using PAM solutions such as BeyondTrust or equivalent technologies.

• Experience or good understanding of Single Sign-On (SSO), Multi-Factor Authentication (MFA), authentication, and authorization mechanisms.

• Experience supporting information security audits, access control assessments, regulatory requirements, and remediation of IAM-related findings.

• Relevant certifications such as Security+, CEH, CCNA, Microsoft Security/Identity certifications, or IAM/PAM vendor certifications.

Skills:

• Strong understanding of Identity and Access Management concepts, principles, processes, and best practices.

• Good practical knowledge of Joiner, Mover, and Leaver (JML) processes, account provisioning, modification, and de-provisioning.

• Good knowledge of Role-Based Access Control (RBAC), access entitlements, least privilege, segregation of duties, and access governance.

• Ability to prioritize and manage multiple requests within defined SLAs.

• Ability to prepare accurate reports and maintain comprehensive documentation.

• Knowledgeable in cybersecurity concepts, threats, vulnerabilities, and security controls.

Competencies:

• Demonstrates strong awareness of information security, confidentiality, and access-related risks.

• Maintains a high level of accuracy when reviewing and managing access permissions.

• Handles sensitive identity and access information responsibly and ethically.

• Analyzes access requirements, identifies risks, and develops appropriate solutions.

• Effectively prioritizes requests and manages workload in accordance with agreed timelines.

• Works effectively with IT, Information Security, HR, business units, and application owners.