Information Security Analyst

Please find below the 4 open positions (2 for each demand) and the job descriptions.

• Position 1
• Title: Information Security Analyst
• Duration: 3 months

Job Description:

Role Summary
The role is responsible for ensuring alignment and adherence to Identity and Access Management (IAM) policies, procedures, and controls across the enterprise, including SaaS (third-party) applications. The ideal candidate will have a strong background in IAM operations, compliance, and governance, and the ability to collaborate across technology, business, risk, and audit functions.

This position focuses on governance and compliance with IAM standards for SaaS applications and third-party platforms, ensuring regulatory and Prudential organizational requirements are met.

Key Responsibilities

• Ensure adherence to IAM policies, standards, and control requirements across SaaS applications
• Support governance activities, including periodic access reviews, entitlement certifications, segregation of duties (SOD) monitoring, and recertification processes
• Partner with SaaS application owners, technology, risk, and compliance teams to address audit findings and remediate identity-related issues
• Contribute to IAM metrics, reporting, and dashboards to measure adherence and effectiveness for SaaS and enterprise systems
• Participate in IAM process improvements to align with evolving regulatory and security requirements
• Support IAM lifecycle management governance within SaaS environments
• Work with SaaS application owners, business partners, and vendors to integrate IAM governance requirements into third-party platforms
• Assist with exception management, risk acceptance, and control gap documentation related to SaaS systems

Qualifications

• Bachelor s degree in Information Security, Information Technology, or a related field (or equivalent experience)
• 1 3 years of experience in IAM, IT Risk, Audit, or Information Security
• Working knowledge of IAM technologies and SaaS application integration
• Familiarity with IAM governance processes and their application to SaaS platforms
• Understanding of regulatory compliance frameworks such as SOX, PCI, and NIST
• Experience working with risk, compliance, and audit teams
• Strong analytical, documentation, and communication skills
• High attention to detail with the ability to identify and escalate concerns

• Position 2

• Title: Information Security Analyst

• Duration: Initial 6 month assignment with plans into end of 2026

Job Description:

Key Responsibilities

- Prioritize and address highest-risk security controls first, followed by medium-risk areas (definitions in progress).

- Coordinate with Application Owners and IAM Control Owners to verify compliance, leveraging centralized systems or SaaS-specific controls.

- Conduct policy compliance assessments against defined SaaS and security standards (e.g., IAM).

- Perform evidence verification and tracking (manual and automated).

- Maintain compliance records in the system of record.

- Provide expert consultation on remediation actions, ensuring gaps are closed within 6 months.

- Define, establish, and monitor compliance tracking metrics.

- Develop process flows and apply standard procedures for exceptions and risk acceptance.

- Document and escalate key compliance issues for ongoing tracking.

- Support long-term transition into BAU operations post-initial assignment.

Must-Have Skills

Proven success in a senior-level Information Security Analyst role (operating autonomously).

Deep knowledge of Identity and Access Management (IAM) and SaaS compliance standards.

Strong expertise in compliance verification, evidence tracking, and remediation oversight.

Experience engaging application and control owners to validate compliance.

Ability to create and manage metrics, process flows, and governance records.

Excellent stakeholder management and communication skills.

• Familiarity with industry-standard SaaS Security frameworks.
• Hands-on experience with centralized compliance and governance tools.
• Background in metrics dashboarding and automated reporting.
• Experience handling exception and risk acceptance workflows.
• Exposure to BAU security/compliance operations planning and transition.