Information Security Advisor - Identity Access Management

Information Security Advisor - Identity Access Management Location

This role requires associates to be in-office 1 - 2 days per week, fostering collaboration and connectivity, while providing flexibility to support productivity and work-life balance. This approach combines structured office engagement with the autonomy of virtual work, promoting a dynamic and adaptable workplace. Alternate locations may be considered if candidates reside within a commuting distance from an office.

Please note that per our policy on hybrid/virtual work, candidates not within a reasonable commuting distance from the posting location(s) will not be considered for employment, unless an accommodation is granted as required by law.

The Information Security Advisor role focuses on supporting Periodic Access Certifications, ensuring the quality and compliance of identities, applications, and entitlements, while providing strategic support for IAM processes. Responsible for the delivery of strategic network security, access control, and secure transaction/messaging solutions. Ensures security solutions involving the use of technologies are well-conceived, designed, and implemented in compliance with enterprise standards.

• Provides first-level engineering design functions.

• Ensure that identity, application, and entitlement data utilized in periodic system access reviews meet our internal controls for completeness and accuracy, adhering to policy requirements.

• Lead internal control transformation efforts and offer valuable feedback for process alignment and improvement.

• Leads or plans implementations for access management and network security technologies.

• Develops testing plans to ensure quality of implementation.

• Leads the investigation and reporting of data security events and incidents.

• Support the Periodic System Access Certifications in compliance with internal policy requirements and external standards like SOX, SOC1, SOC2, Hi-Trust, PCI-DSS, and statutory audits.

• Provides technical support to business and technology associates in risk assessments and implementation of appropriate information security procedures, standards, and technologies.

• Advocate for best practices in Centralized Access Provisioning/Termination, Modern Authentication, Role-Based Access Control, and Periodic Access Certifications, enhancing IAM posture and customer delivery.

• Represents major upgrades and business system replacements in change control.

• Partner with internal and external IAM stakeholders to analyze and improve Identity Management System data points.

• Maintain standard templates for audit process consistency and address data gaps with IT/business teams.

• Oversees Enterprise mix of vendor services; may act as a key contact for setting vendor strategy.

• Designs & engineers repetitive technical solutions based on business requirements and defined technology standards.

• Monitor progress on projects and KPIs, providing timely reports to leadership and facilitating effective escalations with stakeholders.

• Leads level 1 & 2 incident recoveries and may organize the efforts of other analysts as part of incident recovery;
  Leads root cause analysis efforts.

• Regularly participate in Agile ceremonies to facilitate project alignments.

• Provide on-the-job training to peers for new processes or tools.

• Articulate a clear vision for supporting organizational security and compliance, inspiring high standards and continuous improvement across the team.

Access Control, Application Security, Business Continuity & Disaster Recovery Planning, Cryptography, Information Security and Risk Management, Legal / Regulations, Compliance & Investigations, Operations Security, Physical (Environmental) Security, Security Architecture & Design, Telecommunications & Network Security

• Requires BS/BA degree in Information Technology or related field of study and a minimum of 5 years experience in systems support, system administration, system engineering, system security, access management, network security, network…