Security Administration Analyst

Brown Brothers Harriman•Jersey City, NJ

1d•$100,000 - $125,000

About The Position

Brown Brothers Harriman is recruiting a Security Administration Analyst to join its Information Security Management (ISM) Provisioning team. This lead individual-contributor role manages user access and data entitlements across multiple platforms and applications, supporting access provisioning, identity lifecycle processes, and security administration. The analyst processes requests accurately and on time, resolves provisioning issues, and applies security policies, service-level agreements, and least-privilege principles. The role requires collaboration with global peers, application owners, security coordinators, and stakeholders across ISM, Technology, and business units. The analyst also trains, mentors, and provides day-to-day leadership to junior team members without direct supervisory responsibility. The successful candidate will help identify and drive improvements to security processes and the organization’s security posture. Working hours are 10:00–18:00 ET. The role also requires flexible support for global operations, including periodic shift adjustments, rotating on-call coverage, and alternate work schedules.

Requirements

Bachelor’s degree in Computer Science, Information Systems, or a related discipline, or equivalent experience.
Strong interest in technology, Information Security, and Identity and Access Management.
3–5 years of relevant experience in Information Security, Identity and Access Management, or a related field.
Knowledge of role-based access control and least-privilege access principles.
Experience with security administration tools such as Active Directory, ServiceNow, RBAC models, and Identity and Access Management platforms such as SailPoint or similar.
Analytical and problem-solving skills with strong attention to detail.
Advanced Microsoft Excel and data analysis skills, including VLOOKUP, pivot tables, and VBA.
Ability to manage multiple priorities and meet deadlines.
Strong written and verbal communication skills.
Ability to work independently and collaboratively.

Nice To Haves

Experience with scripting or programming, such as PowerShell, Python, SQL, or Java, for automation.
Experience in financial services or regulated environments.
ITIL certification.
Cybersecurity certification, such as Security+ or CISSP.

Responsibilities

Process user access and provisioning requests across multiple systems and applications in accordance with SLAs, with a focus on quality, accuracy, and least-privilege principles.
Perform first-level ISM user system access requests with a 95% completion rate within 48 hours.
Participate in and lead identity lifecycle activities for new hires, transfers, and terminations, including employees and consultants; understand the business purpose, risk, and impact of access requests.
Follow security requirements and train junior staff on security risks and least-privilege provisioning principles.
Support standard and complex access provisioning activities.
Investigate and resolve access-related incidents and provisioning issues through ISM support channels, including the hotline and service, New Hire, Mover, Leaver, provisioning, and deprovisioning queues.
Coordinate with Security Coordinators and Application/Data Owners to validate and fulfill access requests.
Update knowledge bases and maintain documentation so controls remain current and aligned with best practices.
Participate in special projects as assigned.
Provide flexible support for global operations, including periodic shift adjustments, rotating on-call coverage, and alternate work schedules.
Collaborate with global teams to ensure consistent security practices and outcomes.
Identify opportunities to streamline workflows, enhance controls, and improve provisioning processes, including through automation using scripting or technical tools where applicable.
Communicate with technical and non-technical audiences, share knowledge, and contribute to a collaborative team environment.
Build working relationships with stakeholders across ISM, Technology, and business units.
Maintain a focus on risk management, data protection, and security posture; identify risks, support mitigation, and escalate issues promptly.
Contribute to accountability, control awareness, and continuous improvement.