Senior Security and IAM Analyst

Senior Security and IAM Analyst
Rate: £450 - 550 per day
IR35: In scope
Duration: 6 months
Location: Leeds 2 days / Remote 3 days
Reporting into the IT Risk & Security Lead. Taking into account the further heightened cyber-security environment, work with a focused IT Risk and Security team and other stakeholders, in the provision of security dependencies across multiple Bank requirements, focussing primarily on leading on the continued design, development and implementation of the Identity and Access Management (JML/RBAC) in a Microsoft Azure cloud environment, and assisting where necessary across other ITSec requirements such as mitigating Cyber Risks, responding to security incidents, and processing BAU security functions as required.
Core role accountabilities

• Primary responsibility to lead and deliver the continued design, development and implementation of the Identity and Access Management in a Microsoft Azure cloud environment.
• Responsible for role-based access control (RBAC) - analysis and policy definition
• Work with a diverse set of stakeholders across the business including 3rd party and partner organisations in relation to secure implementation of policies and controls as relevant to JML/RBAC
• Support the management of the identity lifecycle as part of the joiner, mover and leaver process.
• Deliver best practise relevant to IAM.
• Understand technical IAM aspects and decode / engage with the business
• Contribute to other IT security functions or policies as required.
• Awareness of emerging cyber security threats and ways to manage them.
• Awareness of emerging tools or technologies to improve cyber resilience and general Information Security.

Knowledge, Skill and Experience requirements

• Demonstrable experience of IAM implementations in a Microsoft environment (i.e. Azure Access Directory / Entra ID).
• Thorough understanding of JML/RBAC and principles and how to implement across Microsoft environments (SharePoint/Azure/etc)
• Experience in Identity governance and management tools.
• Understanding of key industry frameworks (such as NIST, ISO and Cyber Essentials).
• Strong ability to leverage data security principles in deliverables.
• Excellent investigative, problem solving and fault diagnosing skills and ability to articulate solutions in a business context.
• Ability to work in a team with minimal supervision and prioritise own work effectively.
• Able to deliver detailed and clear documentation.

Desirable

• Relevant professional qualifications/certifications, preferably in Microsoft Azure/M365 technologies
• Understanding and awareness of Data Protection responsibilities and practise.
• Good facilitation experience.
• Experience working with multiple IT managed service providers.
• Knowledge and understanding of the business processes, ideally within financial services.
• Wider role may include providing security direction across other workstreams across the bank.

IAM, IDENTITY ACCESS MANAGEMENT, ITSEC, CYBER RISK, AZURE, CLOUD, JML, RBAC, SHAREPOINT, NIST, ISO, CYBER ESSENTIALS, SECURITY, FINANCIAL SERVICES, GOVERNMENT, PUBLIC SECTOR
#4573388 - Phil Barrowclough