Security & Controls & User Management (Roles, Access)
Job Details
- Experience
- 4–6 years of relevant experience
Requirements
- Have 4–6 years of relevant experience in security and controls, Identity and Access Management (IAM), user administration, access management, or a closely related field.
- Bring hands-on knowledge of roles, permissions, access controls, and user lifecycle management.
- Understand role impacts, access dependencies, access governance, and access-related risks.
- Have practical experience with user onboarding, access provisioning, access modification, and deprovisioning.
- Have experience handling access requests, approval workflows, access reviews, and user recertification.
- Hold a graduate degree in any discipline.
- Be able to investigate access issues and determine appropriate resolutions.
- Work effectively with business, IT, security, and application teams, using analytical, problem-solving, communication, and stakeholder-management skills.
- Oracle Cloud or application security experience is advantageous.
- Knowledge of IAM concepts, Role-Based Access Control (RBAC), Single Sign-On (SSO), and Segregation of Duties (SoD) is preferred.
- Experience improving access-management processes, workflows, and security controls is beneficial.
- Experience in an AMS, managed services, or IT operations environment is an advantage.
Responsibilities
- Manage user onboarding, access requests, approvals, provisioning, modifications, and deprovisioning.
- Administer roles, permissions, security controls, and access configurations across relevant applications.
- Analyze role impacts, access dependencies, and potential conflicts to identify and address access risks.
- Conduct periodic user access reviews, certifications, and recertification activities.
- Identify gaps in access governance, user administration, and control processes, and recommend improvements.
- Improve workflows for onboarding, access requests, approvals, provisioning, and user management.
- Investigate and resolve user access, role, and permission issues with technical and business teams.
- Maintain documentation for roles, access processes, controls, procedures, and operational guidelines.
- Collaborate with business, IT, security, and application stakeholders to ensure appropriate and timely access.
- Support security audits, compliance activities, access-control assessments, evidence gathering, and related IT operations.