Security Administration Analyst

At BBH, Partnership is more than a form of ownership—it’s our approach to business and relationships. We know that supporting your professional and personal goals is the best way to help our clients and advance our business. We take that responsibility seriously. With a 200-year legacy and a shared passion for what’s next, this is the right place to build a fulfilling career.

Brown Brothers Harriman is currently recruiting a Security Administration Analyst to join the Information Security Management (ISM) Provisioning team. This role is a key individual contributor responsible for supporting access provisioning, identity lifecycle processes, and security administration activities across multiple platforms.

The ideal candidate demonstrates strong analytical capability, attention to detail, and a proactive mindset, with a desire to enhance security processes and contribute to a high-performing global team.

The Security Administration Analyst is a lead individual contributor responsible for managing user access and data entitlements across multiple platforms and applications. The role executes access management activities, resolves provisioning issues, and ensures requests are processed accurately, on time, and in accordance with security policies, established Service Level Agreements, and least privilege principles. It requires effective collaboration with global peers, application owners, and security coordinators, as well as the ability to train, mentor, and provide day-to-day leadership to junior team members without direct supervisory responsibility.

The role also requires an understanding of organizational roles and responsibilities, intellectual curiosity, and the ability to identify and drive opportunities to strengthen BBH’s security posture and existing processes.

• Process user access and provisioning requests across multiple systems and applications in accordance with defined Service Level Agreements (SLAs), with a focus on quality, accuracy, and adherence to least-privilege principles.
• Perform first-level ISM user system access requests with a 95% completion rate within 48 hours.
• Participate in and lead identity lifecycle activities for new hires, transfers, and terminations, including full-time employees and consultants, while understanding the business purpose, risk, and impact of access requests (the why behind the ask”)
• Follow established security requirements and train junior staff members on key security risks and the application of least-privilege provisioning principles.
• Support both standard and more complex access provisioning activities.
• Investigate and resolve access-related incidents and provisioning issues through ISM support channels, including the hotline, service queues, and New Hire, Mover, Leaver, provisioning, and deprovisioning queues.
• Coordinate with Security Coordinators and Application/Data Owners to validate and fulfill access requests.
• Perform ad hoc operational tasks such as knowledge base updates and documentation maintenance to ensure controls are current, documented, and aligned with best practices.
• Participate in special projects as assigned.
• Provide flexible support for global operations, including periodic shift adjustments, rotating on-call coverage, and alternate work schedules, to help ensure business continuity.

• Collaborate effectively with global teams to ensure consistent security practices and outcomes.
• Drive continuous improvement by identifying opportunities to streamline workflows, enhance controls, and improve provisioning processes through automation initiatives using…