Location
Bangalore | India
Job description
Job Description
The goal of the Access Management lead is to ensure that all access to IT systems, is secure, robust and audited appropriately and follows a consistent and high quality end to end process covering all technologies. This role will:
- Proactively identify gaps in our access management processes and create plan to address them working with relevant teams
- Be working closely with all technical teams, enterprise architecture and business teams involved in the end to end processes to ensure all requirements set out in the identity & access management policies are clear
- Be our SPOC for our IDAM policies to ensure it reflects the latest requirements in line with Diageo's risk appetite for the domain
- Ensure that the process is fully documented end to end, cradle to grave and covers anyone moving role
- Work with all teams across D&T and the business to ensure compliance to access management policy and control requirements
- Build a balanced process council access management ensure changes and improvements do not impact the effectiveness of the processes
This person is responsible for the process from A to Z, leading process development, handling ongoing monitoring and assessment activities, and being responsible for compliance and dealing with non-compliance
The successful candidate is expected to have at least 8 years of work experience in the below fields:
- Experience in Cybersecurity: A good background in cybersecurity, particularly in identity and access management, is essential.
- Understanding of Access Management Concepts: Deep knowledge of IDAM principles, including understanding privileged accounts, least privilege principle, session monitoring, and the concept of a privileged access workstation.
- Familiarity with IDAM Tools and Solutions: Experience with specific tools (CyberArk, Saviynt, Azure PIM, Active Directory and Azure Active Directory)
- Knowledge of Regulatory Compliance: Understanding relevant regulations and standards (such as SOX, HIPAA, GDPR, ISO 27001)
- Technical Skills: Proficiency in system administration, network security, scripting/automation, and an understanding of operating systems, databases, and network infrastructure.
- Risk Assessment and Leadership Skills: Ability to identify, assess, and mitigate risks associated with privileged access.
- Problem-Solving Skills: Strong analytical and problem-solving skills to seek issues and implement solutions related to privileged access.
- Effective communication skills are vital for interacting with various collaborators, including IT staff, management, and auditors. The ability to explain technical concepts to non-technical audience essential.
- Project Management Experience: Capability to lead and follow through sophisticated actions in a must
- Continuous Learning and Adaptation: Cybersecurity is a constantly evolving field. A willingness to continuously learn and adapt to new technologies, threats, and industry standard methodologies is important.
- Certifications (optional but useful): Professional certifications such as CISSP (Certified Information Systems Security Professional), CISM (Certified Information Security Manager), or certifications specific to Access management solution is useful.
Educational Background : Bachelor's or equivalent experience in Information Technology, Computer Science, Cybersecurity, or a related field
Worker Type Regular
Primary Location: Bangalore Karle Town SEZ
Additional Locations : Budapest
Job Posting Start Date 2024-02-13
Job tags
Salary