Compliance Analyst II

Identity & Access Management (IAM) Security Administrator

The IAM Security Administrator will work within the Identity and Access Management (IAM) department cross-functionally to support access management and privileged access management, identity lifecycle, and credential management lifecycle. Each of these areas of support will include administrative and compliance tasks. The candidate will need to have an understanding of key IAM security controls in all activities that they perform and will be required to be knowledgeable on several different IAM systems. The candidate will leverage a robust understanding of information systems access controls to document complex access models within the IAM systems to facilitate the authorization, documentation, and management of all identity access.

Responsibilities

• Applies knowledge, skills and abilities to implement process or procedure, timely and professionally
• Supports and executes compliance control processes which include the evaluation and documentation of control evidence
• Modeling existing and novel information systems access controls into role based access control (RBAC) model within the IAM system.
• Ensures understanding of governing policies, procedures and standards in order to perform functions with the security and compliance expectations.
• Monitoring and managing access maintenance workflows to ensure compliance requirements are met.
• Managing Identity lifecycle events to ensure timely authorization and de-authorization of user access.
• Analyzing existing RBAC model to ensure key IAM security best practices are being followed (i.e. least privilege, separation of duty, etc)
• Ensures daily tasks are completed with special focus on completing compliance requirements.
• Participates in the resolving of issues and resolving customer escalations.
• Attends training for staff on current and new system functions for performing duties.
• Builds and develops strong relationships with business area clients by providing superior customer support as demonstrated by clearly owning, resolving and communicating issues and problems; being responsive to needs, requirements, and deadlines; and generally promoting goodwill in a professional and trust-building manner.
• Provides administrative support for the access to systems and data.

Requirements

• Proven at mastering attention to detail.
• Ability to operate in a confidential and controlled environment.
• Strong analytic ability.
• Ability to manage concurrent and differentiated tasks.
• Excellent oral and written communications skills.
• Willingness to learn new technologies.
• Ability to work in a team environment.
• Familiarity with access controls for enterprise level information system platforms (e.g. Linux, Microsoft, Oracle).
• Familiarity with access controls for enterprise level web applications.
• Experience implementing RBAC models within an IAM system at the enterprise level leveraging principles of least privilege and separation of duty (SOD).
• Bachelor s degree in information systems or equivalent relative work experience.

Preferred

• Familiarity with the energy regulatory environment and NERC-CIP standards.
• Experience using Cherwell, IdentityIQ, and CyberArk.
• Experience managing access control policies within an IAM system.
• Experience managing privileged accounts within a PAM system.

• Experience implementing access controls on a variety of enterprise level information systems.