Identity & Access Management Analyst

Position Title:

Identity & Access Management Analyst

FLSA Status:

Non-Exempt

Reports to:

Identity and Access Management Program Lead

Job Summary: The Identity and Access Management (IAM) Analyst position is a practitioner role working under the leadership of cybersecurity management.

The IAM Analyst works closely with line of business, security, and IT teammates to establish and manage a process of enterprise-wide identities and access granted to systems and applications. The analyst uses IAM tools and platforms to support provisioning, de-provisioning, and exceptions to access changes; ensuring they are clearly tracked, reported, and reviewed according to established policies. Analysts in this role support senior management in maintaining appropriate and lease privilege access. Daily, an IAM Analyst verifies identity and access controls are healthy and performing optimally to prevent unauthorized access. To be successful, candidates must have a good understanding of security principles, practical hands-on experience with host and application configurations, on- and off-premises solutions, directory services and identity governance administration principles.

Essential Functions:

• Serves on a distributed security and technology team responsible for establishing and maintaining identities and entitlements within IAM solutions.
• Implements identity controls and settings that align with policies and governance structure.
• Manages certification campaigns to ensure completeness, accuracy, and timeliness of completion.
• Works closely with HR, the lines of business, and IT to develop and maintain Role Base Access templates.
• Works closely with security leadership, teammates and stakeholders to evaluate and implement access models that align with organizational risk posture.
• Supports IAM governance, policies, and solutions across SSO, directory, certificate, MFA, privileged accounts, automation and behavior analytics systems.
• Assesses and resolves IAM issues that occur across the employee base, as well as with external entities.
• Evaluates business impact and risk exposure based on the level of access granted and make recommendations where improvements should be made.
• Works closely with incident responders during potential incidents and escalates to management as needed.
• Documents access, removals, and exceptions, and maintain integrity for audit reviews.
• Reviews internal, external and contractor accounts as part of periodic audits.
• Makes recommendations for improvements in automation efficiencies, security practices and end-user experience.
• Collects key performance indicators and related operational metrics, and track SLAs used to validate success as well as future areas of improvement.
• Executes tactical requests and supports the strategic vision for rigorous and scalable IAM controls.
• Maintains understanding of business processes to aid in managing enterprise identity and access.
• Frequently interacts with business units to understand their plans, risk posture and tolerance, and how IAM supports their vision and business obligations with security in mind.
• Assists with implementation of IAM projects from inception to completion to ensure they are on time and within budget.
• Maintains positive relationships and promotes efficiency among a group of workers.
• Plans and supervises the activities of others.
• Maintains confidentiality of all sensitive Bank information.
• Maintains a positive and caring atmosphere for customers and employees consistent with Southside Bank's mission, CORE Values, and Blue Book culture guide.
• Provides enthusiastic, professional, and courteous service to Southside Bank customers and employees.
• Participates in proactive team efforts to achieve departmental and company goals.
• Understands and agrees to abide by the policies and procedures established at Southside Bank.
• Responsible for complying with audit policies and procedures as they pertain to this position.
• Performs duties in compliance with applicable laws and regulations, including but not limited to the Bank Secrecy Act (BSA) and related anti-money laundering laws, and in accordance with the Bank's Information Security Program.
• Must comply with all applicable laws and regulations.

Additional Functions:

• Performs routine duties with minimal supervision using standard practices or procedures.
• Performs duties as assigned to reach team goals.
• Knowledge of financial institution policies, procedures and regulations preferred.
• Complies with all safety policies, practices, and procedures. Report all unsafe activities to supervisor and/or Human Resources.
• Performs additional duties, as assigned or directed.

Required Education/Experience:

• Bachelor's degree in information technology, computer science, information security or related technical field; or one to three years' related experience and/or training in cybersecurity or information technology; or equivalent combination of education and experience required.
• 2+ years of related role administration with IAM/IGA solutions, and preferably experience with establishing/reviewing enterprise-wide user access roles and entitlements.
• Minimum of one active cybersecurity or identity management certification.

Necessary Skills:

• Preferably 3-5+ years' experience in security access administration, with 2+ years' technical hands-on IAM practitioner experience.
• Familiarity with administering directory services, Windows and Entra ID, SSO, MFA and role-based access control (RBAC).
• Experience administering IAM systems, access controls, security and risk management, and security governance fundamentals.
• Familiar with one or more regulatory requirements and laws such as, but not limited to, PCI DSS, Federal Financial Institutions Examination Council (FFIEC), Sarbanes-Oxley (SOX), HIPAA, GDPR and GLBA. Additionally, experience in one or more of the following frameworks: ISO 27002, ITIL, or NIST CSF.
• Preferable experience with one or more scripting languages (e.g., Python, PowerShell, Bash).
• Strong written and oral communication skills across varying levels of the organization.
• Understanding of service design, delivery concepts and control frameworks.
• Organized, with the ability to prioritize and complete tasks within defined SLAs.
• Excellent judgment and the ability to make quick decisions when working with complex situations.
• High degree of integrity, trustworthiness and confidence; represents the company and its management team with the highest level of professionalism.

Physical Activity/Dexterity:

• Manual dexterity sufficient to reach/handle items and work with fingers. Works with fingers and perceives attributes of objects and materials.

Physical Environment Demands:

• Must be able to remain in a stationary position 90% of the time.
• The person in this position needs to occasionally move about inside the office to visit other offices, conference rooms, office machinery, etc.
• Constantly operates a computer and other office productivity machinery, such as a calculator, copy machine, and telephone.
• Constantly positions self to operate on a computer.
• The person in this position frequently communicates with other people throughout each day. Must be able to exchange accurate information when conversing.

Working Conditions/Environment:

• Hybrid work schedule allowing for limited work from home, after successful training period.
• Designated workspace at assigned facility conducive to a high productivity work environment.
• Moderate noise (e.g. business office with computers and printers, light traffic).

Work Schedule/Hours:

• Monday through Friday; 8:00am - 5:00pm.
• Available for overtime, as needed.

Equal Opportunity Employer/Protected Veterans/Individuals with Disabilities

The contractor will not discharge or in any other manner discriminate against employees or applicants because they have inquired about, discussed, or disclosed their own pay or the pay of another employee or applicant. However, employees who have access to the compensation information of other employees or applicants as a part of their essential job functions cannot disclose the pay of other employees or applicants to individuals who do not otherwise have access to compensation information, unless the disclosure is (a) in response to a formal complaint or charge, (b) in furtherance of an investigation, proceeding, hearing, or action, including an investigation conducted by the employer, or (c) consistent with the contractor's legal duty to furnish information. 41 CFR 60-1.35(c)