Management Analyst Jobs

About The Position

Requirements

• Bachelor’s degree in computer science, IT Administration, Information Systems or related field. (In lieu of degree, 3+ years of experience required).
• Knowledge of application security processes and procedures.
• Knowledge of Identity and Access concepts and technologies to secure production and corporate access, such as: Azure Active Directory (Microsoft Entra ID), SSO, etc.
• Ability to understand and learn automation technologies and build applicable automations
• Experience and/or conceptual knowledge with a broad array of security technologies, such as firewalls, SIEM/SOAR, endpoint security, and vulnerability management solutions (Qualys, Tenable).
• Possesses understanding of concepts and knowledge in various information security areas, such as: Identity and Access Management, Security technology, Role-based Access Controls, Information Risk and Governance.
• Ability to manage multiple complex challenges in parallel, and solve them with cost effective, highly automated, efficient, and proven security technologies or controls.
• Highly detail oriented and driven to take initiative.
• Must possess excellent communications and interpersonal skills and be able to effectively work with all levels of Bank management as well as external customers.
• Hands-on understanding and familiarity of Cloud security principles and technology.

Nice To Haves

• Applicable Information Assurance/Security certifications preferred.
• Experience in highly regulated environments including financial services or banking industry is preferred.
• One or more Azure Certifications preferred.

Responsibilities

• Identity lifecycle (joiner-mover-leaver): Execute and continuously improve onboarding, role changes, and offboarding for internal users and ensuring right-first-time provisioning, timely revocation, and a clean audit trail. Integrate HR signals and directory attributes to drive role-based access (RBAC) updates automatically; remove obsolete entitlements when a user moves.
• Entitlement Management & Access Packages (Entra): Build and administer Access Packages (catalogs, resource roles, request/approval policies, expiration, etc.) within Azure and other applicable solutions. Govern lifecycle with automated assignment, review, and expiry to prevent stale access while reducing manual tickets.
• Operate Privileged Identity Management (PIM) solutions: Manage role-eligibility, MFA requirements, approvals at activation, time-bound elevation, and recurring reviews to minimize standing privileged access.
• Member Access & Permissions: Process daily member access requests and translate verified instructions into application entitlements across Bank systems. Troubleshoot access/system issues and effectively collaborate with other Bank departments and personnel. Maintain traceable records of approvals/changes to support regulatory and audit requirements.
• Application Access Administration: Operate enterprise IAM platforms (e.g., Microsoft Entra ID, ADDS, and other internally-built solutions) to grant, modify, and revoke access; enforce SSO, MFA, RBAC, and Segregation of Duties policies across directories and apps. Standardize request/approval workflows, entitlement catalogs, and role definitions with clear SOPs. Perform User-Acceptance-Testing (UAT) within applications in support of deployments. Manage keys and secrets in support of business applications.
• Access Reviews & Audit Readiness: Plan, schedule, and run Access Reviews for groups, applications, and privileged roles; capture reviewer decisions and automate removals of unneeded access. Prepare audit evidence (reports, logs, approval histories, exceptions) to satisfy control tests and exam procedures.
• Incident Response (On-Call): Participate in On-Call rotation for all IT Security related incidents; investigate, contain, and restore securely while documenting post-incident findings. Partner with Security Operations to correlate signals and tighten controls after lessons learned.
• Compliance & Governance: Align identity controls to banking authentication/access guidance; maintain consistent processes that produce audit-ready artifacts. Track identity KPIs (time-to-provision, stale-access reduction, review completion rates) and prepare metrics/dashboards when applicable.