Information Security User Management Professional

Information security is the protection of information (and associated assets). Information must therefore be protected continuously and appropriately against a wide range of threats by implementing a suitable set of controls, including policies, processes, procedures, organizational structures and software & hardware functions.

Information Security is comprised of a number of domains of which Access Management is a major one. Access Management is about defining and implementing security requirements to control access to information and hence to prevent unauthorized access to them.

The BNP Paribas Fortis Access Management Team aims at managing the accesses that users of BNP Paribas Fortis can have to information resources on an enterprise level.

Responsibilities

The User Manager is mainly in charge of the day-to-day activities related to users and user-role assignments in order to meet the evolving needs of the users of the organization. User Management covers the activities that resides from changes, e.g. when a person joins the organization, moves from one job function to another or leaves the organization.

He/she operates under the policies & guidelines set out by the Security Office and therefore he/she should gain a thorough knowledge of the access management solution.

The User Manager also serves as the Single Point Of Contact for the users and by consequence he/she should have strong communication skills to be able interact with the users and their managers in an effective & professional way. He/She should also be very concise in their actions.

The activities of the User Manager will mainly be focused on the following fields:

Definition, organization and monitoring of the day-to-day activities related to users and the assignment of accesses to the users;

Ensure the implementation of the Access Management Solution;

Provide support and expertise to any stakeholders impacted by User Management activities;

Enforce the Access Management rules, strategies and policies;

Actively contribute to the continuous improvement of the Access Management Solution.

A

Deliverables + Key activities

1.

Security Office:

Act as a valuable team member for the day-to-day running of the activities

Provide guidance and assistance to other team members

Acts as backup for other User Managers

Communicate and align with other Teams in the IAM Cluster

Establish and maintain relationships with the key actors involved in the access management process

2.

Definition of the Access Management Solution, Policies and Procedures

Provide expertise and guidance on the Access Management Solution specific to the Security Office and actively contribute to its continuous improvement

Assist in the definition, maintenance and proper implementation of the access management framework, policies & standards and of processes shared with other departments

Enforce the Access Management rules, strategies and policies

3.

User Life Cycle & Workflow:

Actively participate and further develop and improve User Management processes and procedures within the Security Office.

4.

User Management:

Define, organize and monitor of the day-to-day activities related to users and the assignment of accesses to the users. Perform these activities in adherence to the defined policies and standards.

Provide support and expertise to any stakeholders impacted by User Management activities

Provide assistance in the use of the tool and workflow

Resolving calls related to User Management

5.

Communication and Training:

Further develop the documentation and training material related to user management

Provide communication and training on user management

Setup and maintain communication channels and ensure that relevant documentation is published

Ensure alignment of all training and communication activities with other stakeholders

6.

Monitoring & Control:

Define and implement Monitoring, Control and Reporting tasks according to the defined policies (control plan)

Assist in the requirements definition and development of appropriate facilities and tools to perform the Monitoring & Control tasks

Participate in the resolution of Access Management related Audit issues

Assist in measuring the Key Performance Indicators and in monitoring the achievement of the defined targets

Report and escalate any identified risk and potential breach

7.

Governance

Active participation in further improvement of the shared IAM environment by indicating new requirements; by participating in work groups established for transversal topics; by being actively involved in testing etc.

8.

Transformation

(when applicable)

Participate in projects and perform all required temporary tasks to enable a smooth transition from current environment to target environment.

Agile environment.

Follows the Customer processes for projects, incident and change management.

Being standalone and team worker, analytical minded, meet commitment, ability to work in a dynamic and multi-cultural environment, flexible, customer-oriented, understand risk awareness.

Motivated self-starter, process-oriented with high attention to detail

Quick self-starter, pro-active attitude.

Good communication skills, Good analytical and synthesis skills.

Autonomy, commitment and perseverance.

Ability to work in a dynamic and multicultural environment.

Flexibility (in peak periods extra efforts may be required).

Open minded and show flexibility in self-learning new technologies/tools.

You are customer minded and can translate technical issues into non-technical explanations.

You are always conscious about continuity of services.

You have a very good team spirit and share your knowledge and experience with other members of the team. Working in collaboration with team.

Client-oriented, analytical, initiative oriented and able to work independently.

Be flexible and ready to provide support outside of Business hours (on-call).

Able to take additional responsibility.

Able to work from base location Mumbai (Whichever is your base location) during hybrid model.

You are flexible and ready to provide support outside of Business hours (on-call).

Skills Referential

Behavioural Skills: (Please select up to 4 skills)

Ability to collaborate / Teamwork

Communication skills - oral & written

Organizational skills

Client focused

Transversal Skills: (Please select up to 5 skills)

Ability to understand, explain and support change

Ability to develop and adapt a process

Ability to develop others & improve their skills

Ability to set up relevant performance indicators

Ability to manage a project

Education Level:

Bachelor Degree or equivalent

Experience Level

At least 5 years.