Identity and Access Management (IAM) Security Analyst I, II, III, Senior

Reports to: Information Security Manager

Functions Supervised: None

Primary Functions: Perform identity and access management along with information security functions in support of the credit unions operations.   Functions would include support of Identity and access management as the primary function. Other programs/process would be privileged access management, network access control, incident response, and security event and incident management.

Duties and Responsibilities:

1. Lead the implementation and development process for the Identify and access Management (IAM) program with a security focus.
2. Work with vendors and business partners to develop and manage the IAM Program.
3. Lead program design and review working directly with business lines on the integration requirements including provisioning, de-provision, and identity lifecycle into the IAM platform.
4. Develop strategy roadmaps for the IAM systems and program.
5. Develops enterprise wide standards for IAM.
6. Monitor system logs, SIEM tools, and other security tools for unusual or suspicious activity.
7. Monitor internal control systems to ensure appropriate information access levels and security is maintained.
8. Implement or coordinate remediation required by policies, standards, reviews, and audits, documenting exceptions as necessary. 
9. Conduct audits and reviews of endpoint, network, and system security controls and manage remediation efforts.
10. Conduct security reviews of the network security architecture and identity access and assess the risk to these changes.
11. Define the user access security model for all systems in the credit union.
12. Conduct risk analysis, threat, and vulnerability assessments.
13. Perform other duties as assigned.

Education:  Bachelor's degree in Computer Science, Management Information Systems, or related technical field.

Creditable Experience in Lieu of Education: Equivalent technical training and/or IT certifications required as related to IAM.

Experience/Skills: One of the following industry security certifications is required: Certified Identity and Access Manager, Certified Information Systems Auditor, Systems Security Certified Practitioner, any Level 4 or 5 GIAC Certification or other advanced level certification.  Seven years demonstrable experience managing and implementing enterprise systems/networks. Four years direct experience in an Information Security role.  Experience with IAM, Firewalls, IDS/IPS, Vulnerability Assessment tools, Endpoint solutions, Proxy servers, Security Incident and Event Management Systems, Data Loss Prevention, Active Directory and Permissions Management desired. Excellent written and verbal communication, organizational, and interpersonal skills required. Basic project management and good time management skills.

Tenure: Assignment to the Identity and Access Management (IAM) Security Analyst I category 10, Identity and Access Management (IAM) Security Analyst II category 09, Identity and Access Management (IAM) Security Analyst III category 08 or Senior Identity and Access Management (IAM) Security Analyst category 07 will be determined by the candidate’s education or experience.  Advancement requires management recommendation and will be based on the candidate’s certifications and/or performance.

Equal Opportunity Employer