Senior Associate - Identity and Access Management

About the Job
The Senior Associate - Identity and Access Management (IAM) will play a critical role in managing daily user provisioning, de-provisioning, and access changes across various systems, including Active Directory. This position involves support for IAM functions such as privileged access management (PAM), network access control, incident response, and security event management (SEIM).

Key Responsibilities

• Manage daily user access requests in accordance with agreed Service Level Agreements (SLAs).
• Provide expertise in Active Directory, Azure Active Directory, Windows, Single Sign-On (SSO), Password Reset, and Multi-factor Authentication (MFA) with a focus on access control.
• Handle the provisioning and de-provisioning of all user accounts within systems and applications.
• Serve as the primary contact for the IAM team regarding application/system access issues with other departments and partners.
• Oversee on-boarding and off-boarding requests for privileged access accounts.
• Ensure compliance with established approval workflows and break-glass procedures for PAM.
• Support business and IT functions in defining, creating, and managing role-based access control (RBAC).
• Collaborate with vendors and business partners to verify and validate IAM-related controls.
• Identify and communicate any IAM requirement gaps to the Technology & Infrastructure teams.
• Offer support to various database and directory services, application servers, operating systems, and network infrastructure.
• Aid in the development of the IAM program with a focus on security aspects.
• Monitor system logs and security tools for suspicious access-related activities.
• Conduct security reviews of infrastructure and network security architecture.
• Troubleshoot and resolve identity and access-related issues while completing the necessary documentation.
• Maintain and update the IAM knowledge base, consisting of technical references, security advisories, and regulatory information.
• Support outsourced vendors and partners in complying with contracted service-level agreements.

Qualifications & Skills Required

• A bachelor's degree in computer science or information systems.
• Relevant Information Security certifications (CISA, CISM, CISSP, CRISC, or COBIT 5) are highly desirable.
• A minimum of 2 years of experience in information security, specifically with implementing PAM and IAM solutions.
• Solid understanding of information security principles including Individual Accountability, Least Privilege, and Need to Know.
• Familiarity with various information security management frameworks such as NIST, ISO 27001, UAE Information Assurance Standards (NESA), PCI-DSS, and Sarbanes-Oxley.
• Knowledge of identity lifecycle management, access certifications, and role-based access control (RBAC).
• Understanding of controls for managing privileged users, systems, services, and shared accounts.
• UAE Nationals with a family book are encouraged to apply as part of Emiratization initiatives.