System Security Analyst

Job Description

Expected to be 03 months contract with possible extension.

Pay rate: $25/hr. The pay rate may differ depending on your skills, education, experience, and other qualifications.

Featured Benefits:

• Medical Insurance in compliance with the ACA
• 401(k)
• Sick leave in compliance with applicable state, federal, and local laws

Description: Ensure every user has the correct access required for their role-based job function through least-privilege principles, while strictly adhering to internal security policies and external audit guidelines. This role bridges the gap between technical permissions management and regulatory compliance, ensuring the identity lifecycle remains efficient, secure, and audit ready.

Responsibilities:

User Access Provisioning & Lifecycle Management of Permissions:

• Execute the end-to-end lifecycle of user profiles, including creating new accounts, modifying permissions for internal transfers, and performing rapid de-provisioning for offboarding to maintain environment security.

Role Discovery & Governance:

• Collaborate with department heads and data stewards to analyze and document business roles, ensuring technical permissions align with actual job functions through Role-Based Access Control (RBAC) models.

User Access Reviews (UAR):

• Facilitate and manage periodic access certification campaigns, providing reporting to managers and collecting formal signoffs to meet compliance requirements.
• Audit Evidence Collection:
  Respond to requests from internal and external auditors (e.g., SOX) by extracting system logs and providing verified documentation of compliant access controls.

Segregation of Duties (SoD) Analysis:

• Regularly monitor for conflicting permissions such as a single user having the ability to both request and approve financial transactions and remediate these toxic combinations.

Technical Troubleshooting:

Investigate and resolve complex access-related issues and authentication failures across enterprise platforms to ensure established security and compliance standards and uninterrupted business operations.