IAM Security Specialist

Popular, Inc. • Jacksonville, FL

2d • Hybrid

About The Position

The IAM Security Specialist is responsible for leading oversight of managed security services provider (MSSP) activities to ensure user access to systems, data, and applications is managed in alignment with organizational procedures, standards, and regulatory requirements, including FRB, NYDFS, GDPR, and NIST expectations. This role exercises independent judgment in validating that authorized users are granted appropriate access, confirming IAM policies are implemented and enforced, and promoting the integrity and security of the IAM environment through proactive monitoring, quality assurance, and continuous improvement. Additionally, the IAM Security Specialist supports and advances the organization’s IAM program by coordinating access governance activities, reviewing user access certification results, identifying control gaps, recommending process improvements, and partnering with business and technology stakeholders to strengthen compliance and operational effectiveness. Reporting to the IAM Operations Manager, the Specialist serves as a subject matter contributor for identity-related controls, provides guidance to Analysts and MSSP resources, supports escalations, and helps ensure controls are effectively and consistently implemented across business units.

Requirements

• Bachelor’s degree in information systems, cybersecurity, computer science, or related discipline (or equivalent work experience).
• Minimum of 3-5 years of experience in identity and access management, access governance, security administration, IT audit, compliance, or a similar role.
• Practical experience administering, supporting, or providing governance oversight for Identity and Access Management (IAM) platforms, such as Saviynt, SailPoint, or equivalent technologies.
• Proficiency with Active Directory, LDAP, SSO, and other IAM technologies (e.g., Saviynt, SailPoint).
• Strong understanding of authentication, authorization, role-based access control (RBAC), least privilege, segregation of duties, and access certification concepts.
• Demonstrated ability to analyze, troubleshoot, and resolve moderately complex issues related to identities, access, accounts, authentication, authorization, entitlements, and permissions.
• Experience developing, reviewing, and improving written documentation for identity and access management processes, controls, procedures, and audit evidence.
• Strong organizational, analytical, and problem-solving skills, with the ability to manage multiple priorities, identify process gaps, and recommend practical solutions.
• Effective verbal and written communication skills, with the ability to guide MSSP resources, collaborate with technical and non-technical stakeholders, and communicate risks, findings, and recommendations clearly.

Nice To Haves

• Familiarity with banking services, policies, procedures, and regulatory compliance requirements (such as AML/BSA/Cyber Security) is a plus.

Responsibilities

• Lead oversight and quality validation of the MSSP’s user account lifecycle activities, including creation, modification, deletion of user accounts, and management of user roles and permissions, ensuring adherence to organizational policies, standards, and regulatory requirements.
• Monitor, assess, and escalate MSSP handling of end-user password resets and access requests to ensure timely resolution, SLA adherence, and compliance with established security protocols.
• Evaluate the MSSP’s implementation and enforcement of access control policies and procedures, validating that access is appropriate, authorized, and aligned with least privilege and segregation of duties principles.
• Lead coordination and review of access management incident response activities, ensuring timely resolution, effective escalation, root cause analysis, and documentation of corrective actions.
• Identify and recommend opportunities to improve IAM processes through automation, standardization, and enhanced controls, while supervising MSSP implementation and operational adoption.
• Manage escalations and complex issue resolution with the MSSP, application owners, and business stakeholders related to access management, role assignments, and certification concerns.
• Track, analyze, and report on MSSP remediation efforts associated with access review findings, ensuring issues are resolved timely and recurring trends are identified for management attention.
• Provide direction, review, and quality assurance for the MSSP’s configuration, execution, and completion of periodic access certification campaigns, including application data, user access, enterprise roles and entitlements, and service and generic account reviews.
• Support and enhance the RBAC lifecycle by validating role data, analyzing access patterns, reviewing role definitions, and partnering with stakeholders to improve role quality and governance outcomes.
• Maintain oversight of access governance documentation managed by the MSSP, including review schedules, process workflows, and audit evidence.
• Partner with application owners and business stakeholders to gather requirements, assess access needs, and guide improvements to Enterprise Role design, quality, and sustainability.
• Provide oversight and guidance to the MSSP in delivering user training and support on IAM policies, procedures, and system usage, ensuring consistency and clarity for all users.
• Monitor and maintain oversight of written procedure documentation related to identity and access management provisioning, terminations, and transfers, verifying that MSSP practices align with organizational standards.
• Provide oversight and guidance to the MSSP in delivering user training and support on IAM policies, procedures, and system usage, ensuring consistent communication and understanding across the organization.
• Coordinate identity access management-related audit requests, including evidence collection, validation, issue follow-up, and timely response to internal and external auditors.

Benefits

• Our hybrid workplace model is a flexible benefit designed to support the evolving needs of our organization and team members. As priorities and circumstances change, work arrangements may be adjusted to ensure alignment with organizational goals and employee well-being.

What This Job Offers

• Job Type: Full-time
• Career Level: Mid Level