Information Security Specialist RBAC & SoD

Position: Information Security Specialist – (RBAC & SoD)
Practice - CIS - Cloud, Infrastructure, and Security Services   About Cloud Infrastructure & Security Services:
Cognizant’s Cloud, Infrastructure, and Security Services Practice (CIS), is all about embracing digital transformation by driving core modernization holistically across layers. We help customers transform infrastructure and workplace to meet the rapidly evolving needs of the digital era. Our holistic approach delivers key results for our customers by achieving cloud driven modernization and workplace and operational transformation to run the business in a secure environment.

Job Summary   We are seeking an Information Security Specialist to support the Workforce Identity and Access Management (WIAM) team with a focus on Role-Based Access Control (RBAC) and Segregation of Duties (SoD) governance. This role will be responsible for enhancing the organization’s IAM security posture through the design, implementation, and maintenance of access governance controls, SoD policies, and risk management processes.

The ideal candidate will possess strong experience in IAM governance, compliance, access controls, and risk reporting, along with the ability to partner effectively with business, technology, audit, and security stakeholders.
In this role, you will:
Develop, maintain, and enhance Segregation of Duties (SoD) policies and controls across enterprise applications and technology platforms.
Partner with application owners, business stakeholders, and technology teams to identify, analyze, and document SoD requirements and access governance controls.
Support the design and implementation of Role-Based Access Control (RBAC) frameworks, role management capabilities, and access governance processes.
Conduct IAM risk assessments, identify control gaps, and recommend remediation strategies to improve Workforce IAM security controls.
Develop and maintain reporting, dashboards, KPIs, and metrics to measure the effectiveness of IAM governance and compliance controls.
Support audits, regulatory reviews, compliance assessments, evidence collection, and remediation activities related to IAM controls.
Provide guidance and subject matter expertise on IAM governance, technology risks, control frameworks, and regulatory requirements.
Collaborate with security, risk, audit, and technology teams to monitor, detect, and address emerging IAM-related risks and vulnerabilities.
Facilitate governance activities, stakeholder workshops, risk reviews, and working sessions to drive control adoption and maturity.
Contribute to process improvements, operational efficiencies, and automation initiatives within the IAM governance domain.
What you need to have to be considered      5–7 years of experience in Identity and Access Management (IAM), Information Security, Technology Risk, or Access Governance roles.
Strong understanding of IAM principles including RBAC, SoD, access governance, entitlements management, identity lifecycle management, and compliance controls.
Experience implementing technology controls and governance processes to address IAM-related risks.
Familiarity with enterprise IAM platforms such as SailPoint, Saviynt, Cyber Ark, Okta, Microsoft Entra , or similar solutions.
Experience supporting regulatory, compliance, audit, and risk management programs.
Strong knowledge of technology risk management frameworks, control standards, and risk treatment methodologies.
Experience developing dashboards, metrics, automated reporting, and risk analytics using tools such as Power BI, Excel, SharePoint, and related platforms.
Strong communication and stakeholder management skills with the ability to engage senior leadership and business partners.
Experience working in Agile delivery environments and enterprise governance…