Job
Description
Managing oversight and governance of the ICA Function in MGGS and acting as a point of escalation including the management of direct reports, including daily and ad-hoc activities for which the team is responsible. . Managing the efficient operation of, Identity related controls including but not limited to PAR, Certification Reviews, Application and Infrastructure Reconciliations, Toxic Access Combinations and segregation of duties controls Joiners, Movers, Leavers, Password Compliance, effectively to ensure they operate in accordance with both internal & external Audit whilst also meeting business needs. Ensure quality MI is produced to highlight progress, issues, trends etc and feedback to any drops in Service to the Identity Controls and Assurance Manager in the UK #REF! Work collaboratively with other Identity functions, as well as the wider Enterprise Security and M&G Plc organisation, to ensure the secure and stable delivery and operation of Identity and logical access controls. Oversight of 2nd line support, ServiceNow queues and ARC approval queues. Oversight of the IDAM ICA mailboxes ensuring it is managed and queries are answered in a timely manner. Owning the QA sampling process of the team and highlighting failures / findings, with plans for remediation. Identifying gaps in the processes and driving through the change to make the controls more effective. Proactively manage all stakeholder expectations through either effective resolution of or updating on progress of their outstanding queries. Always look for improvements within processes and controls and have continuous improvement plans with automation Identify opportunities for security controls optimisation in line with emerging threats internally and externally. Support identification of appropriate, fit for purpose and cost effective control solutions, and adopting new security technologies to support effective and efficient management of risk and controls. Owning current and new process documents and updating the documents frequently Expert / SME level knowledge of the Identity Controls Ensure any new team members follow a training plan and have a good understanding around the different processes. Validating any findings from the 2LOD or External auditors testing and challenging where necessary. Coordinate and are involved in all phases of IT audits, from its preparation stage to remediation tracking in Metric Stream as an action owner. Expert knowledge of the operating models of immediate business areas and all stakeholders. Be the SME for any Automation project related to the IDAM controls. Involvement in any SailPoint improvement work as an expert from the ICA team. Knowledge: SSCP, ITIL qualified. Advanced knowledge of SQL Management studio and running queries, SailPoint, UI Path for Automation, MS Operating Systems, MS Office including MS Outlook & Power BI. Broad knowledge of business conducted within M&G, including M&G Global Services India. Excellent knowledge of Audit and Compliance, and experience of dealing with internal and external auditors. Skills: Relationship management across multiple External and Internal Stakeholders and cultures A strong understanding of the platforms & software relevant to the delivery of the Identity services for which they are accountable. Strong organisational skills to manage a variety of work and prioritise effectively. Self-motivated, able to multi task and complete work within agreed deadlines. Ability to work both independently to goals, as well as effectively collaborate as part of a team, and with wider areas such as Cybersecurity and IT Problem-Solving & Analytical Thinking: Strong troubleshooting and analytical skills for identifying security risks and implementing effective solutions. Strong attention to detail essential. Communication Skills: Excellent communication skills, with the ability to present and explain complex security concepts to both technical and non-technical stakeholders. Experience: 10yrs+ experience in identity and access management processes and technology. A good understanding of security risks. Experienced in working with UK stakeholders. Educational Qualification: Graduate in any discipline (A Levels or equivalent qualification).
