Identity and Access Analyst

SWBC•San Antonio, TX

62d

About The Position

SWBC is seeking a talented individual to support enterprise-wide Identity and Access Management (IAM) operations within the information security team by implementing secure authentication, authorization, and accounting controls across systems, applications, and data. Monitors and maintains access controls in alignment with industry standards, organizational policies, and evolving business needs. Reviews and processes access requests based on user roles and resource requirements, applying IAM policies and technologies to safeguard digital assets. Why you'll love this role: Join a dynamic information security team where your expertise in identity and access management directly protects critical systems and data. You’ll collaborate across departments, influence security policies, and help shape enterprise-wide access strategies. If you thrive in a fast-paced environment, enjoy solving complex challenges, and want to make a meaningful impact on cybersecurity, this role offers the opportunity to grow your skills and contribute to a secure digital future.

Requirements

Bachelor's degree in information systems, Computer Science, Cybersecurity, or a related field from an accredited four-year college or university, or equivalent experience.
Possess a Security+ or complete within six (6) months of hire.
Obtain industry-recognized Identity certification (e.g., CIAM, CIMP) within 12 months of hire.
Solid understanding of foundational information security principles and access control models.
Knowledge of on-premises and cloud-based Microsoft identity platforms (e.g., Active Directory, Azure AD, Entra).
Knowledge of SaaS-based Identity-as-a-Service (IDaaS) platforms.
Knowledge of Identity federation and single sign-on (SSO) technologies.
Experience in service desk operations, with exposure to access requests and basic IAM support.
Experience using service ticket queues and Kanban boards using ITSM platforms in an enterprise environment, ensuring timely resolution aligned with SLAs.
Strong customer service skills with the ability to document issues and delivery outcomes or escalate issue to senior management.
Proficiency in MS Word, Excel, and other standard office applications.
Excellent verbal and written communication skills.
Ability to work effectively across teams and with stakeholders at various levels.
Willingness to participate in an on-call rotation.
Ability to sit for extended periods performing sedentary tasks.
Ability to travel locally, statewide, and nationally as needed.

Nice To Haves

Familiarity with systems administration, IT support, or related technical environments is preferred.

Responsibilities

Assists in provisioning, modifying, and revoking user access to SWBC-owned or controlled systems and data by following established procedures and tools within a diverse technology environment.
Responds to service tickets and Kanban tasks related to identity and access management, monitors request queues for timely action, and escalates issues to appropriate teams when necessary to ensure efficient resolution and compliance with access policies.
Communicates with business managers and internal and external stakeholders within an enterprise-wide user access provisioning process to create, manage, and remove users and groups, and use permissions to allow and deny local and remote access to SWBC-owned or controlled resources.
Consults with business managers and system and network administrators to determine, create, and manage role-based access control groups to ensure only the minimum number of employees or authorized third parties have access to information systems, applications, and data as required by SWBC policy.
Supports the allocation of access accounts to employees and authorized third parties based on business needs and specific events and assists in monitoring account access to ensure it aligns with job responsibilities.
Supports access control audits and periodic access reviews of directory services, access control lists, employee, contractor, vendor, service accounts, and other access control management systems to enforce least privilege, separation of duties, and compliance requirements.
Recommends new or changes to existing policies to limit access to and govern the use of information, information systems, and facilities.
Monitors access controls to protect source code, applications, and other intellectual property from loss, unauthorized use, release, and modification.
Supports Disaster Recovery, Business Continuity, and Incident Response plans and processes; and supports efforts to achieve and maintain a single set of credentials (single sign-on) for each user, device, or application to use throughout the enterprise.