Security Administration Analyst

Brown Brothers Harriman•Jersey City, NJ

10d•$100,000 - $125,000•Onsite

About The Position

At BBH, Partnership is more than a form of ownership—it’s our approach to business and relationships. We know that supporting your professional and personal goals is the best way to help our clients and advance our business. We take that responsibility seriously. With a 200-year legacy and a shared passion for what’s next, this is the right place to build a fulfilling career. Job Description – Security Administration Analyst Brown Brothers Harriman is currently recruiting a Security Administration Analyst to join the Information Security Management (ISM) Provisioning team. This role is a key individual contributor responsible for supporting access provisioning, identity lifecycle processes, and security administration activities across multiple platforms. The ideal candidate demonstrates strong analytical capability, attention to detail, and a proactive mindset, with a desire to enhance security processes and contribute to a high-performing global team. Position Overview The Security Administration Analyst is a lead individual contributor responsible for managing user access and data entitlements across multiple platforms and applications. The role executes access management activities, resolves provisioning issues, and ensures requests are processed accurately, on time, and in accordance with security policies, established Service Level Agreements, and least privilege principles. It requires effective collaboration with global peers, application owners, and security coordinators, as well as the ability to train, mentor, and provide day-to-day leadership to junior team members without direct supervisory responsibility. The role also requires an understanding of organizational roles and responsibilities, intellectual curiosity, and the ability to identify and drive opportunities to strengthen BBH’s security posture and existing processes.

Requirements

Bachelor’s degree in Computer Science, Information Systems, or related discipline (or equivalent experience)
Strong interest in technology, Information Security, and Identity and Access Management
3–5 years of relevant experience in Information Security, Identity & Access Management, or related field
Knowledge of role-based access control and least privilege access principles
Experience with security administration tools such as: Active Directory, ServiceNow, RBAC models, Identity & Access Management platforms (e.g., SailPoint or similar)
Analytical and problem-solving skills with strong attention to detail
Advanced Microsoft Excel and data analysis skills, including VLOOKUP, pivot tables, and VBA.
Ability to manage multiple priorities and meet deadlines.
Strong written and verbal communication skills
Ability to work independently as well as in a collaborative team environment.

Nice To Haves

Experience with scripting/programming (e.g., PowerShell, Python, SQL, Java) for automation
Experience in financial services or regulated environments
ITIL certification is a plus.
Cybersecurity certification (e.g., Security+ or CISSP) is a plus.

Responsibilities

Process user access and provisioning requests across multiple systems and applications in accordance with defined Service Level Agreements (SLAs), with a focus on quality, accuracy, and adherence to least-privilege principles.
Perform first-level ISM user system access requests with a 95% completion rate within 48 hours.
Participate in and lead identity lifecycle activities for new hires, transfers, and terminations, including full-time employees and consultants, while understanding the business purpose, risk, and impact of access requests (the why behind the ask”).
Follow established security requirements and train junior staff members on key security risks and the application of least-privilege provisioning principles.
Support both standard and more complex access provisioning activities.
Investigate and resolve access-related incidents and provisioning issues through ISM support channels, including the hotline, service queues, and New Hire, Mover, Leaver, provisioning, and deprovisioning queues.
Coordinate with Security Coordinators and Application/Data Owners to validate and fulfill access requests.
Perform ad hoc operational tasks such as knowledge base updates and documentation maintenance to ensure controls are current, documented, and aligned with best practices.
Participate in special projects as assigned.
Provide flexible support for global operations, including periodic shift adjustments, rotating on-call coverage, and alternate work schedules, to help ensure business continuity.
Collaborate effectively with global teams to ensure consistent security practices and outcomes.
Drive continuous improvement by identifying opportunities to streamline workflows, enhance controls, and improve provisioning processes through automation initiatives using scripting or technical tools where applicable.
Communicate clearly with both technical and non-technical audiences.
Share knowledge and contribute to a collaborative, team-oriented environment.
Build strong working relationships with stakeholders across ISM, Technology, and business units.
Maintain a strong focus on risk management, data protection, and security posture.
Proactively identify potential risks, support mitigation efforts, and escalate issues appropriately and in a timely manner.
Contribute to a culture of accountability, control awareness, and continuous improvement.