IAM Specialist

Technical Experience

• Proven experience in Identity and Access Management, with particular expertise in user access reviews and privileged access management systems such as CyberArk.
• Hands-on experience with enterprise identity management platforms and access governance tools.
• Strong understanding of identity governance principles, including role-based access control (RBAC), segregation of duties, and principle of least privilege.
• Experience with identity management lifecycle processes including provisioning, de-provisioning, and access certification.

IAM Audit and Assessment Skills

• Demonstrated experience in conducting IAM audits and access assessments across complex enterprise environments.
• Proficiency in audit methodologies and frameworks specific to identity and access management, including COBIT, COSO, and ITIL.
• Strong analytical skills with ability to identify patterns, anomalies, and potential security risks through data analysis and system reviews.
• Experience with audit tools and technologies for automated access analysis, reporting, and compliance monitoring.
• Knowledge of forensic analysis techniques for investigating access-related security incidents and policy violations.
• Ability to develop and execute comprehensive audit programmes covering all aspects of identity lifecycle management.

Process Management Skills

• Demonstrated ability to manage complex, multi-stakeholder processes with high attention to detail and accuracy.
• Experience in coordinating with diverse stakeholder groups to achieve compliance and operational objectives within tight timeframes.
• Strong project management skills with ability to handle multiple concurrent initiatives whilst maintaining quality standards.
• Experience in process documentation, improvement, and standardisation activities.

Compliance and Risk Management

• Knowledge of regulatory compliance requirements related to access management and data protection, including GDPR,SOX, and industry-specific regulations.
• Understanding of risk assessment methodologies and ability to identify and mitigate identity-related security risks.
• Experience supporting audit activities and maintaining comprehensive audit trails for access management activities.
• Knowledge of compliance frameworks and standards such as ISO 27001, NIST Cybersecurity Framework, and COBIT.