Cybersecurity Identity Access Management (IAM) Specialist

Job Summary:

We are seeking a highly skilled and motivated Cybersecurity Identity Access Management (IAM) Specialist to join our dynamic cybersecurity team. The successful candidate will play a crucial role in safeguarding our organization's digital assets by implementing and managing robust identity and access management solutions. The IAM Specialist will be responsible for defining, implementing, and maintaining access controls, authentication mechanisms, and identity governance frameworks.

Key Responsibilities:

·       Identity and Access Management:

o   Develop, implement, and manage the strategic roadmap for end-to-end identity and access management processes and controls, including subsidiaries and third party engagement.

o   Administer user account provisioning, de-provisioning, and access reviews.

o   Ensure compliance with security policies, industry regulations, and best practices related to IAM (PCI DSS, SOX, SOC2, GDPR / CCPA, etc.)

o   Support regular audits and assessments to identify and address compliance gaps.

o   Collaborate with internal and external stakeholders to implement corrective actions.

·       Access Control and Authorization:

o   Design and enforce access controls for systems, applications, and data.

o   Implement best practices for identify management, such as role-based access control (RBAC) and least privilege principles.

o   Monitor and audit user access to identify and mitigate potential security risks.

·       Authentication and Single Sign-On:

o   Manage and support multi-factor authentication (MFA) solutions, and single sign-on (SSO) mechanisms for seamless user access.

o   Stay abreast of emerging authentication technologies and industry trends.

·       Identity Governance:

o   Develop and maintain identity governance frameworks.

o   Conduct regular access reviews and certifications.

o   Collaborate with business units to ensure accurate and timely access management.

·       Incident Response and Investigation:

o   Participate in incident response activities related to unauthorized access or data breaches.

o   Conduct investigations into security incidents involving identity compromise.

·       Policy and Documentation:

o   Develop and update IAM policies, standards, and procedures.

o   Create and maintain documentation for IAM processes and configurations.

·       Collaboration and Training:

o   Collaborate with IT teams, application owners, and business stakeholders to implement effective IAM solutions.

o   Provide training and awareness programs on IAM best practices for end-users and IT staff.

Qualifications and Skills:

·       Bachelor's degree in Computer Science, Information Security, or a related field.

·       Proven experience in implementing and managing IAM solutions.

·       In-depth knowledge of access management principles, authentication protocols, and identity governance.

·       Familiarity with industry standards such as OAuth, SAML, and OpenID Connect.

·       Experience with IAM tools and platforms (e.g., Okta, Azure AD, SailPoint).

·       Strong understanding of cybersecurity principles and best practices.

·       Excellent analytical and problem-solving skills.

·       Effective communication and collaboration abilities.

Relevant certifications such as CISSP, CISM, or CIAM are a plus