Manager -Access Governance

Role Purpose

Identity & Access (IAM) system provides assurances and helps keep track of employee activity. IAM is baseline of security control and used for account Provisioning & De-provisioning, Authentication, Authorization & Role Management, and Session Management. This role is to manage overall access certification & authorization of access across enterprise for all applications & access to each employee.

Role Accountability

Identity & Access Management Governance

1. Manage & Mature Identity & Access Management (IAM) Governance program in support of the functional & company strategy, goals, and performance objectives.
2. Undertake & Lead Identity & Access Certifications periodically as mandated by the policy.
3. Develop & Maintain Access Control Matrix/SoD for Applications as mandated by the policy & regulatory requirements.
4. Ensuring right level of access for end-users, focusing on security, compliance, and risk mitigation
5. Implement and maintain RBAC to streamline access management and ensure users have only the necessary permissions.
6. Track and monitor access activities to identify potential security risks and ensure compliance with regulations. 
7. Ensure procedures related to account access administration and SOPs are clearly document, updated and adhered to
8. Manage user access throughout their employment lifecycle, including onboarding, role changes, and offboarding.
9. Update Access Governance standards to enable seamless and secure integration of PAM solutions.
10. Vendor Management - Comfortable in working and coordinating with Vendors / Partners in a Multi-Vendor Environment
11. Stakeholder Management - Interact with key business, IT and External stakeholders to proactively identify business challenges and opportunities that can be addressed with innovative technology solutions.

Stakeholder Management

This role requires strong skills to discuss technical & non-technical aspects with business & IT stakeholders.

1. Internal Stakeholders: Information technology function including its vendor, Business functions & Senior leaders like CISO & DPO
2. External Stakeholders: Vendor Team

Measures of Success

1. Successful number of adoption and implementation of Business applications with IAM and other security projects
2. Increase in maturity of Security Programs (Adoption & Capabilities).
3. Adherence of Role-Based Access Control (RBAC)
4. Compliance to Regulatory Requirement & Policies

Technical Skills / Experience / Certifications

1. IAM, PAM domain knowledge with capabilities to integrate core security/IT/Business solutions.
2. Extensive knowledge of access control matrix, RBAC, SoD, authentication methods, processes, and tools
3. Experience on IAM, PAM tool and processes 
4. Prior experience with SAML, LDAP, Kerberos, Unix, Microsoft AD, and MFA
5. Strong knowledge and understanding of enterprise IT Systems, cloud infrastructure and security principles and technologies
6. Ability to adapt to changes in the original project plans; effectively communicates changes or delays to team members and key stakeholders
7. Good Documentation, Communication, presentation, interpersonal and leadership Skills
8. Industry standard certifications such as CIAM, CAMS Oracle IAM, OKTA, ISO27001 and others
9. Demonstrable understanding within Identity & Access Management solutions

Competencies critical to the role

1. Demonstrate skills to achieve stated objectives 
2. Demonstrate ability to coordinate with multiple parties and supervisors
3. Demonstrate communication skills to address different audiences
4. Demonstrate self-starter with ability to gain required knowledge in dynamic environments and remain up to date on cutting-edge technologies
5. Demonstrate teamwork & collaboration
6. Demonstrate analytical, troubleshooting, and problem-solving skills

Qualification

Bachelors Degree in a related area such as Computer Science or Information Technology or B.Tech

Preferred Industry

BFSI / NBFC /E-commerce/IT & ITES / Telecom