Iam Specialist

Description:

This role is part of the US/Americas Information Security department and focuses on Identity & Access Management (IAM). The IAM team ensures the management of governance, risk, and controls for all CIB & Group IAM security requirements. You will support audits, regulatory exams, and the execution of IAM controls to ensure compliance with various regulatory and Group requirements.

Key Responsibilities:

1. IAM Controls Development & Execution:

   • Develop and execute IAM-related controls to ensure security and compliance.

   • Analyze, design, and recommend security solutions for IAM.

   • Perform security and quality checks for new applications and updates in the Identity Governance and Administration (IGA) tool.

2. Governance & Reporting:

   • Develop metrics to report on IAM governance programs.

   • Maintain and update IAM-related policies, procedures, and standards.

   • Support periodic access recertification campaigns and access reconciliation as per defined requirements.

3. Compliance & Security:

   • Evolve IAM security by assessing risks, threats, and vulnerabilities.

   • Support internal/external audits and regulatory exams.

   • Contribute to the Continuous Monitoring Framework by reporting Key Risk Indicators (KRIs) and Key Control Indicators (KCIs).

4. Collaboration & Support:

   • Collaborate with team members on ongoing engagements and projects.

   • Report and evidence controls to ensure compliance as per the control plan.

   • Contribute to the overall Governance, Risk, and Compliance (GRC) framework for IT & Cyber in the region.

Minimum Required Qualifications:

• 6 to 10 years of IT experience, with 4 years in IAM.

• Hands-on experience with IAM/IGA platforms (e.g., SailPoint).

• Strong understanding of IAM controls, governance, and compliance.

• Ability to multitask and manage multiple projects and workstreams.

• Strong analytical, problem-solving, and communication skills.

Preferred Qualifications:

• Bachelor’s degree in science or a related field.

• Knowledge of IAM security practices and regulatory compliance (SOX, FFIEC, and 17A5).

• Experience with provisioning, authentication, and authorization technologies and standards.

• Proficiency in creating SQL scripts and knowledge of Python is beneficial.

• Relevant certifications such as CISSP or CIAM Certified are a plus.