IAM Business Analyst

Notes:


2 open roles


IGA and PAM governance experience is mandatory


Need to understand PAM principals


5+ with IGA and 2+ with PAM


Need to know when there are areas where there could be risks


They used CyberArk would be helpful as well (not mandatory)


Privileged Access, and Identity Access Management


Architectures of the applications


How is the privilege discovery done? People with this knowledge is preferred
• The Senior IAM Business Analyst will be responsible for the following currently in-flight and high visibility projects with The Northern Trust Security Technology


SUMMARY OF PROJECT:


Responsible for developing and administering data security policies as well as safeguarding information, evaluating existing data security procedures and identifying new areas of risk. Also maintains and implements information security measures to the system. Primary focus of the role is on day-to-day deliverables, developing solutions based on subject expertise and giving representation where needed.

Major Duties :


1. Implements and identifies improvements to Access Control system enhancements (IGA and PAM)


2. Manages consulting practice with business partners for technology security topics


3. Maintains relationships with partners to manage effectiveness of the access security life cycle management process


4. Mitigates risk of conversions to partners


5. Operates independently; has in-depth knowledge of business unit / function


6. As subject area expert, provides comprehensive, in-depth consulting and leadership to team and partners at a high technical level


7. Carries out activities that are large in scope, cross-functional and technically difficult


8. Role is balanced between high level operational execution and development, and execution of strategic direction of business function activities


9. Responsible for direct interaction with different functions and/or management

Knowledge :


- Excellent oral and written communication skills are required


- In-depth Functional/Industry Knowledge, such as IT audit, IT Risk Management and Information Security is required


- Analytical and problem solving skills are required


- Solid understanding of web application, mainframe, network, workstation and server security configuration

Experience :


- College or University degree and/or relevant proven work experience in the area of Information Security is required.


- Industry certification such as CISSP, CISM, CISA, GIAC is preferred.


- Proven experience working with commercial IAM products for a sizeable enterprise (preferably 5,000+ employees / external users), including development of solutions for Identity Management, user provisioning, Single-Sign & Reduced Sign On and Web Access Management solutions.

Comments for Suppliers:
We are looking for someone with IGA experience (who is capable to understand various Application Architecture) and can identify various risks in IGA. Experience in PAM will be a huge advantage