Security Access Management Lead

Bounteous

5d•Remote

About The Position

Bounteous is a premier end-to-end digital transformation consultancy dedicated to partnering with ambitious brands to create digital solutions for todayâs complex challenges and tomorrowâs opportunities. With uncompromising standards for technical and domain expertise, we deliver innovative and strategic solutions in Strategy, Analytics, Digital Engineering, Cloud, Data & AI, Experience Design, and Marketing. Our Co-Innovation methodology is a unique engagement model designed to align interests and accelerate value creation. Our clients worldwide benefit from the skills and expertise of over 4,000+ expert team members across the Americas, APAC, and EMEA. By partnering with leading technology providers, we craft transformative digital experiences that enhance customer engagement and drive business success. Security Access Management Lead is a member of the IT Security Team who will oversee and co-ordinate day-to-day responsibilities including employee/consultant on-boarding and off-boarding, fulfilling access requests, handling audit/compliance requests, troubleshooting access-related incidents, and providing exceptional customer service to end users and role owners. The successful candidate will play a key role in all security access management related projects. The candidate must have a strong background in technology, security and metrics, and must be highly adaptive. The candidate must be highly organized and analytical and is expected to partner and mentor effectively with other teams on an ongoing basis.

Requirements

Proficiency with Azure AD, Azure MFA, Azure PIM, and ServiceNow.
5+ years of IT Support experience focusing on IT Security and IAM.
2-3 years of leadership experience.
Outstanding communication (verbal, written, and listening) and customer service skills.
Familiarity with IAM and IT security controls, protocols, and best practices.
Ability to interact with all levels of management.
Self-starter with the attention to detail and ability to work independently and/or in a team setting.
High level of accountability, integrity, and dependability.
Strong time, project, and people management abilities.
Bachelor's or master's degree in computer science, information systems or other related field, or equivalent work experience.
Professional security management certification such as : ISC(2) Certified Information Systems Security Professional (CISSP), SANS GIAC Information Security Professional (GISP), GIAC-Security Expert (GSE), or Certified Identity and Access Manager (CIAM)

Nice To Haves

Proficiency with Varonis, Saviynt, and Beyond Trust.
Familiarity with international data privacy regulations and best practices

Responsibilities

Serve as a point of contact for Identity Access Management (IAM) support inquiries and escalations.
Maintain a team schedule, including an after-hours on-call rotation.
Prioritize and follow up on tickets according to established SLAs.
Act as a subject matter expert for all IAM policies, processes, procedures, and technologies.
Facilitate and ensure the company's Audit processes and other required periodic processes are completed promptly.
Coordinate and facilitate fulfilling all Compliance and Audit requests, adhering to established deadlines.
Build relationships and coordinate with key IAM stakeholders across the organization.
Conduct ongoing training and outreach sessions with IAM team members, end users, role owners, and stakeholders.
Identify and drive process improvements, self-service, and automation opportunities.
Contributes to the identification of defects, bugs, or enhancements to the IAM platform.
Facilitate and coordinate UAT and validation activities for IAM and other related deployments and changes.
Create, update, and maintain documentation of IAM procedures and processes
Promote and enforce awareness of key information security practices, including acceptable use of information assets, malware protection, and password security protocols
Identify, assess, and report security risks, focusing on how these risks impact the confidentiality, integrity, and availability of information assets
Understand and evaluate how data is stored, processed, or transmitted, ensuring compliance with data privacy and protection standards (GDPR, CCPA, etc.)
Ensure data protection measures are integrated throughout the information lifecycle to safeguard sensitive information