Job Summary
We are seeking a qualified and detail-oriented Cybersecurity Systems Analyst to join our Information Security & Cybersecurity team. The successful candidate will be responsible for reviewing and managing user access requests, conducting access reviews, supporting Identity and Access Management (IAM) and Privileged Access Management (PAM) operations, and ensuring compliance with information security policies and access control requirements.
The role focuses on enforcing the principle of least privilege, maintaining appropriate access permissions, managing privileged accounts, and strengthening identity and access security controls across systems and applications.
Key Responsibilities
- Review and assess user authorization and access request forms, ensuring appropriate business justification and approval before access is granted.
- Verify that requested access aligns with job responsibilities and complies with the principle of least privilege.
- Conduct periodic user access reviews and access recertification for systems and applications.
- Identify excessive, inappropriate, dormant, or unauthorized access and coordinate corrective actions.
- Support Joiner, Mover, Leaver (JML) processes, including access provisioning, modification, and de-provisioning.
- Review and monitor privileged accounts, including administrator, service, root, and other high-risk accounts.
- Support the administration and operation of PAM solutions, including credential vaulting, password rotation, MFA, and privileged session management.
- Review and maintain Role-Based Access Control (RBAC) roles and access permissions in coordination with system and application owners.
- Identify potential Segregation of Duties (SoD) conflicts and support remediation activities.
- Investigate suspicious access activity, unauthorized access attempts, and access-related security incidents.
- Review privileged access to critical systems and applications to ensure compliance with security requirements.
- Maintain accurate documentation and records of access requests, access reviews, privileged accounts, and IAM/PAM activities.
- Support internal and external audits by providing relevant documentation and evidence.
- Collaborate with IT Infrastructure, Application Owners, HR, and business departments to resolve access-related issues and improve security controls.
Requirements
Education
- Bachelor's degree in Cybersecurity, Information Security, Computer Science, Information Technology, or a related field.
- Relevant IAM, PAM, or cybersecurity certifications are preferred.
Technical Experience
- 3–5 years of hands-on experience in IAM, PAM, access control, and user authorization reviews.
- Experience reviewing access requests and validating business justification, approvals, and appropriate access levels.
- Knowledge of user access provisioning, modification, de-provisioning, and identity lifecycle management.
- Experience with privileged account management and access reviews.
- Understanding of RBAC, SoD, least privilege, and periodic access recertification.
- Good understanding of Active Directory, LDAP, authentication, authorization, MFA, and SSO.
- Familiarity with IAM/PAM solutions such as CyberArk, BeyondTrust, Delinea, SailPoint, Saviynt, Microsoft Entra ID, or equivalent technologies.
- Understanding of Zero Trust security principles and privileged access controls.
Core Competencies
- Strong analytical and problem-solving skills.
- Excellent documentation and reporting skills.
- Strong communication and coordination skills.
- Ability to work collaboratively with technical teams, business stakeholders, and auditors.
- High attention to detail and commitment to information security policies and procedures.