AVP, IAM Platform Application Onboarding and Administration

Cathay Bank•Rancho Cucamonga, CA

1d•$100,000 - $130,000

About The Position

The AVP, IAM Platform Application Onboarding and Administration is responsible for the day to day technical and operational management of Cathay Bank’s Identity Governance and Administration (IGA) and supporting its technical integration and effectiveness towards the automation identity lifecycle management and access reviews / attestations against the bank’s authoritative data source(s), the enterprise network / directory environment and applications for central access management control and administration. This role is responsible for ensuring our IGA technical platform satisfies our security policy ensuring automated and auditable compliance on all relevant IAM controls: access provisioning / reviews / attestations / revocations, segregation of duties, risk tiering and profiling, etc.

Requirements

Bachelor’s degree in information technology engineering or related degree.
Proven familiarity (certification preferred) with IT Security, Risk Management and Identity and Access Management principles and practices (CISSP, CISM, CIAM).
3-5 years of hands-on experience driving the technical integration (onboarding) efforts, from collection of requirements through the definition and mapping of business / application roles to IGA workflows and enforcement of access review campaigns.
Holistic view and understanding of end-to-end IAM (authentication and authorization data, endpoint security, network security, policy engine) and solid understanding of IAM technologies and concepts including but not limited to Single IGA, PAM, Sign-On (SSO), Multi-factor authentication (MFA), step-up authentication (SUA), and out of band authorization (OOBA) and core IAM protocols: OAuth, OIDC, FIDO, SCIM, LDAP, SAML…
Strong ability to collaborate, participate and lead groups and projects.
Strong analytical and problem-solving skills.
Proven ability to collaborate with peer technical teams and manage third-party service providers.
Proven ability to effectively manage concurrent requests and objectives.
Comfortable working and collaborating with key stakeholders, peers, clients, and partners.
Assist efforts around requirement definitions, learning new concepts, and producing clear and accurate documentation.
Demonstrate agility accepting and delivering assignments with high quality solutions.
Proven track record of building strong relationships across business functions.
Excellent verbal and written communication and presentation skills with the ability to adjust presentation details based on target audience.
Extensive knowledge and experience in regulatory guidance, most importantly from the FDIC, CFPB, and FFIEC requirements and supporting guidelines.
Strong Microsoft Excel, PowerPoint, and report writing skills, including the ability to evaluate the usefulness of data and use if in meaningful communication.

Nice To Haves

Relevant product certifications preferred (Okta, SailPoint, OIM…)
Desired connector development skills for connected provisioning, change and deprovisioning of access and entitlements.

Responsibilities

Manage and monitor Cathay Bank’s IGA platform’s availability, capacity, changes, performance, and compliance to our IAM policy and security program and its enforcement on the management of identity lifecycle and application/asset access management.
Drive and coordinate all relevant interactions to achieve the connected-technical interfacing of systems and applications to Cathay Bank’s relevant IAM platforms and maximize the automated enforcement of IAM processes and controls leading to self-sustainable compliance.
Advocate and promote benefits, efficacies and efficiencies gained by integrating systems / applications to Cathay Bank’s IAM platforms, policy and security program enforcing the management of identity lifecycle and application/asset access management.
Drive the scheduling, implementation, and execution of access reviews / attestation campaigns and their effectiveness and proactively verify, amend, and remediate gaps in process to both general and individual campaigns supporting and providing solid auditable traceability that confirms effective end-to-end processes and controls are in place.
Support, collaborate and provide relevant regulatory proof of compliance to Internal / External audit efforts.
Collaborate with Managed Service Providers (MSP) towards the delivery of expert IAM services (application onboarding, connector development, platform evolution) guaranteeing satisfaction of service level agreements and overall continuous improvement.
Provide and coordinate timely engineering support and guidance to our Digital Identity Administration and extended IAM / Security and overall IT Application Management teams to ensure timely incident and problem resolution, effective platform capacity management, and ongoing protocol(s) support and continuous environment integration.
Ensure efficient handing of logs and audit trails supporting compliance verification, event evidencing, and overall security operations efforts.
Support the development of information security processes and procedures as they apply to Bank informational assets, networks, and equipment.
Drive performance and compliance data / metrics analysis related to the bank’s identity and access management program, policy, and standards providing periodic operational / compliance / risk KPIs associated to overall platform performance and IAM compliance baseline.
Participate in efforts to remediate audit and regulatory findings and recommendations related to identity and access management.