Security Administration Analyst

Brown Brothers Harriman & Co•Jersey City, NJ

9d•$100,000 - $125,000

About The Position

Brown Brothers Harriman is seeking a Security Administration Analyst to join its Information Security Management (ISM) Provisioning team. This lead individual-contributor role manages user access and data entitlements across multiple platforms and applications, carries out identity lifecycle and security administration activities, resolves provisioning issues, and ensures requests are processed accurately and on time in accordance with security policies, service-level agreements, and least-privilege principles. The analyst collaborates with global colleagues, application owners, Security Coordinators, and business stakeholders, and provides day-to-day guidance and training to junior team members without direct supervisory responsibility. The role also supports risk management, process improvement, and opportunities to strengthen BBH’s security posture. Working hours are 10:00–18:00 ET, with flexible support for global operations that may include periodic shift adjustments, rotating on-call coverage, and alternate schedules.

Requirements

Bachelor’s degree in Computer Science, Information Systems, or a related discipline, or equivalent experience.
Strong interest in technology, Information Security, and Identity and Access Management.
3–5 years of relevant experience in Information Security, Identity and Access Management, or a related field.
Knowledge of role-based access control and least-privilege access principles.
Experience with security administration tools such as Active Directory, ServiceNow, RBAC models, and Identity and Access Management platforms.
Analytical and problem-solving skills with strong attention to detail.
Advanced Microsoft Excel and data analysis skills, including VLOOKUP, pivot tables, and VBA.
Ability to manage multiple priorities and meet deadlines.
Strong written and verbal communication skills.
Ability to work independently and collaboratively.

Nice To Haves

Scripting or programming experience, such as PowerShell, Python, SQL, or Java, for automation.
Experience in financial services or regulated environments.
ITIL certification.
Cybersecurity certification, such as Security+ or CISSP.

Responsibilities

Process user access and provisioning requests across systems and applications in accordance with SLAs, quality standards, and least-privilege principles.
Complete first-level ISM user system access requests with a 95% completion rate within 48 hours.
Participate in and lead identity lifecycle activities for new hires, transfers, and terminations, including for full-time employees and consultants; consider the business purpose, risk, and impact of access requests.
Follow security requirements and train junior staff on security risks and least-privilege provisioning principles.
Support standard and complex access provisioning activities.
Investigate and resolve access incidents and provisioning issues through ISM support channels, including the hotline, service queues, and New Hire, Mover, Leaver, provisioning, and deprovisioning queues.
Coordinate with Security Coordinators and Application/Data Owners to validate and fulfill access requests.
Maintain knowledge base materials and documentation so controls remain current and aligned with best practices.
Participate in special projects as assigned.
Provide flexible support for global operations, including periodic shift adjustments, rotating on-call coverage, and alternate work schedules.
Collaborate with global teams to ensure consistent security practices and outcomes.
Identify opportunities to streamline workflows, enhance controls, and improve provisioning processes, including through automation using scripting or technical tools where applicable.
Communicate clearly with technical and non-technical audiences, share knowledge, and build relationships with stakeholders across ISM, Technology, and business units.
Identify potential risks, support mitigation, and escalate issues in a timely manner; contribute to accountability, control awareness, and continuous improvement.