Access Control and Security Analyst

Job Title : Information Security Analyst / Analyst – Identity Governance and Compliance

Department : Information Security – Governance, Risk & Compliance (GRC)

Experience Level : 2 - 4 years

Employment Type : Full-time

Job Summary :

We are seeking a highly motivated and detail-oriented Information Security Analyst / Sr. Analyst to join our GRC team, with a focus on Identity Governance and Compliance. This role is pivotal in ensuring that Identity and Access Management (IAM) practices align with regulatory requirements, internal policies, and industry best practices. The ideal candidate will have experience with User Access Reviews (UAR), Active Directory (AD), and a strong understanding of security frameworks such as PCI DSS, ISO 27001, NIST, and COBIT.

Key Responsibilities :

• Manage the Identity Governance and compliance activities, including periodic User Access Reviews (UAR) and RBAC activities.
• Ensure IAM practices comply with internal policies and external regulatory requirements.
• Maintain and enhance identity governance policies, standards, and procedures.
• Provide subject matter expertise on Active Directory (AD), including group policies and access provisioning / deprovisioning.
• Align identity governance practices with frameworks such as PCI DSS, ISO 27001, NIST CSF, and COBIT.
• Engage with IT, HR, and business units to enforce least privilege principles and maintain accurate access records.
• Conduct regular training sessions for the SM team on security controls and client requirements.
• Coordinate SME involvement in quarterly meetings and training initiatives.
• Maintain and organize SharePoint and Jira spaces for audit readiness and evidence management.
• Participate in incident management, change control meetings, and cloud migration initiatives.
• Engage in SOC operations and threat tracking.
• Drive continuous improvement initiatives in identity governance and GRC processes.
• Lead the annual review of security information presentations in collaboration with Compliance.

Required Qualifications :

Preferred Qualifications :