CORE PROFILE

The Identity and Access Security Manager is an individual contributor role under the Infrastructure Security team. The incumbent will have oversight on the end-to-end access and identity management processes within the Maya Group. The incumbent will implement the least privilege principle in all applications, while ensuring that business is supported through appropriate and timely provision of access. The incumbent is expected to own the design of the entire access management process, set supporting standards and policies and ensure enforcement of such.The incumbent is expected to ensure stability and scale of access processes through implementation of appropriate technologies and technical solutions while ensuring alignment of access security strategies with business needs and managing cost.

NATURE OF WORK

• Lead the development and execution of the Maya's Identity and Access Management (IAM) strategy.
• Own the implementation strategy of identity management technologies and collaborate with internal teams and third-party consultants to ensure that functional and timeline implementation goals are met.
• Develop policies and procedures for access onboarding, modifications and offboarding across systems and monitor its execution.
• Oversee the provisioning and deprovisioning of user access to enterprise and production applications and systems
• Review and approve access requests and Role Based Access Control (RBAC) matrices.
• Maintain and optimize the IAM platform for role management, access certification, and entitlement reviews.
• Collaborate with different business units to ensure alignment on user access protocols.
• Collaborate with investigations involving access security incidents and enforce necessary actions on internal and external parties.

DISPLAYED SKILL MASTERY

Technical Skills

• Identity Access Management / User Access Management / Privileged Access Management
• Expertise in implementing and managing Identity Management Solutions and Orchestrators
• System Administration
• Active Directory & LDAP
• Security and Risk management
• Scripting and automation (e.g powershell, python)
• Cloud and Hybrid Environments (AWS, Azure, etc)
• Troubleshooting skills

Essential Skills

• Ability to properly prioritize tasks while operating Business as Usual processes and undertaking implementation projects.
• Ability to lead and influence teams towards a common goal and vision.
• Accurately identify the root cause of issues and engage necessary stakeholders in crafting solutions.
• Agility in adapting to new circumstances and ability to adapt to rapid changes.
• Confidently communicate points to internal and external parties, regardless of their level.
• Confidently coach and motivate team members.

EXPECTED RESULTS

• Implement and operate an Identity Management and Privileged Access Management platform.
• Secure management of user access and privileged access.
• Automation of user provisioning, de-provisioning, access requests, role management and access certifications.
• Enhanced access control and governance
• Reduced security risks related with inappropriate access

REQUIRED QUALIFICATIONS

• College graduate. Preferred degrees on Computer Engineering, Computer Science, Information Technology or other relevant science, technical and engineering courses.
• Implementation and multiple years of direct, hands-on experience in Identity and Access management with at least 2-3 years in a leadership role.
• Strong experience working with Identity Management solutions including implementation, administration and support.
• Strong understanding of privileged access management principles, particularly as they apply to Privileged Access Management and Identity Management solutions.
• Experience managing large-scale IAM implementation projects.
• Strong understanding of Active Directory and cloud platforms, particularly AWS.
• Knowledge of integrating Identity Management Solutions with various systems such as SAP, cloud applications and databases.
• Understanding of IT Security Risk, Audit and information security principles.
• Understanding of security standards and practices (e.g. CIS benchmarks, ISO27001, Data Privacy Act, PCIDSS, BSP).
• Good understanding in the following areas: Platform Security, Data Security, Network Security, Security Assessment Tools, Security Monitoring Tools.
• Platform and Security Certifications are desirable.

Please refer to job description.