The final salary or hourly wage, as applicable, paid to each candidate/applicant for this position is ultimately dependent on a variety of factors, including, but not limited to, the candidate’s/applicant’s qualifications, skills, and level of experience as well as the geographical location of the position.

Applicants must be legally authorized to work in the United States. Sponsorship not available.

Our client is seeking a Sr. Technical IAM Analyst in Richmond, VA.

Role Description

We are seeking a Senior Analyst, Identity and Access Management (IAM). Assignment reports directly to the Manager, Identity and Access Management (IAM). This role is a key member of the information security team and is responsible for the design and operations of key identity and access management controls. The IAM controls are essential to ensure access is granted on a least privilege basis to all internal and cloud-based systems. IAM controls compliance with internal policies and external regulations are a critical part of providing services to its customers while protecting their personal information. The scope of the IAM program includes internal infrastructure systems and applications, and Software as a Service (SaaS) applications. The Senior Analyst, IAM will ensure identity and access management controls in SSB are effective in their operation and will lead efforts to define and implement control improvements that reduce risks and increase efficiency.

• Develop and operate a comprehensive identity and access management program to address the following key control needs:
• Identity Lifecycle Management, Automated Provisioning and Reconciliation
• Auditing, Reporting and User Activity Monitoring
• Access Certification of access to in-scope resources
• Segregation of Duties
• Break Glass, Password vaulting
• Privileged Access Management
• SaaS access reporting for access reviews
• Single Sign On
• Identify enhanced IAM capabilities and control process requirements and evaluate automation tools that will be necessary to implement them. Work with vendors and infrastructure engineering to install and configure the selected toolset.
• Develop, maintain, and implement IAM policies, IAM standards and standard operating procedures. Work with first line information security teams, second line technology risk teams, human resources and business application owners to define and implement controls that meet information security program policy, risk management and regulatory requirements.
• Manage end user and system accounts, user access groups, roles and entitlements using applicable tools and applications.
• Manage, report, and facilitate access certification across all business areas of Bank.
• Define a process for and support the onboarding of new vendors, systems and technology products in order to ensure that all IAM policies are met in a consistent manner.

Skills & Requirements

• Bachelor’s degree in Information Security, Computer Science, Management of Information Systems, or related field required.
• Minimum 10 years' equivalent transferrable job-related experience. For example, experience in IT, Info Sec, Business Analysis, or related fields.
• Minimum of 5 years’ experience in Identity and Access Lifecycle Management Operations and Controls, Identity Governance Administration using Sailpoint. Application onboarding processes and integration.
• Minimum of 3 years’ experience in Access reviews, Role Owner Reviews, Access Group reviews, SOX Access Controls, Privileged Account Access Reviews.
• Minimum of 3 years’ experience supporting MS Active Directory Domain Services, Azure Active Directory, AD FS and Active Directory Connect.
• Minimum of 2 years’ experience supporting Privileged Identity Management Processes (CyberArk, Beyond Trust, Thycotic etc.)
• Preferred minimum of 1 year’s operations experience specifically with CyberArk PAM.
• Experience with Single Sign-On (SSO) and Multifactor Authentication (MFA).
• Preferred minimum of 1 years’ experience in scripting (PowerShell, JSON, and Python etc.).
• Professional security management certification, such as a Certified Information Systems Security Professional (CISSP), Certified Information Security Manager (CISM), Certified Information Systems Auditor (CISA) or other similar credentials.
• Demonstrated understanding of information security policies, standards, and industry leading practices.
• Demonstrated experience with operating processes and procedures that align with controls for Sarbanes Oxley, FFIEC, ISO 27001/2, FISMA or National Institute of Standards and Technology (NIST) CSF is required.
Self-driven, detail-oriented, with excellent written and verbal communication skills, interpersonal and collaborative skills
• High level of personal integrity, as well as the ability to professionally handle confidential matters and procedures.
• High degree of initiative, dependability and ability to work with limited supervision.

Benefits/Other Compensation

This position is a contract/temporary role where Hays offers you the opportunity to enroll in full medical benefits, dental benefits, vision benefits, 401K and Life Insurance ($20,000 benefit).

Why Hays?

You will be working with a professional recruiter who has intimate knowledge of the industry and market trends. Your Hays recruiter will lead you through a thorough screening process in order to understand your skills, experience, needs, and drivers. You will also get support on resume writing, interview tips, and career planning, so when there’s a position you really want, you’re fully prepared to get it.

Nervous about an upcoming interview? Unsure how to write a new resume?

Visit the Hays Career Advice section to learn top tips to help you stand out from the crowd when job hunting.

Hays is committed to building a thriving culture of diversity that embraces people with different backgrounds, perspectives, and experiences. We believe that the more inclusive we are, the better we serve our candidates, clients, and employees. We are an equal employment opportunity employer, and we comply with all applicable laws prohibiting discrimination based on race, color, creed, sex (including pregnancy, sexual orientation, or gender identity), age, national origin or ancestry, physical or mental disability, veteran status, marital status, genetic information, HIV-positive status, as well as any other characteristic protected by federal, state, or local law. One of Hays’ guiding principles is ‘do the right thing’.
We also believe that actions speak louder than words.
In that regard, we train our staff on ensuring inclusivity throughout the entire recruitment process and counsel our clients on these principles. If you have any questions about Hays or any of our processes, please contact us.

In accordance with applicable federal, state, and local law protecting qualified individuals with known disabilities, Hays will attempt to reasonably accommodate those individuals unless doing so would create an undue hardship on the company. Any qualified applicant or consultant with a disability who requires an accommodation in order to perform the essential functions of the job should call or text 813.336.5570.

Drug testing may be required; please contact a recruiter for more information.

#LI-DNI