Security Analyst III - Identity & Access Management; Authorisation & Access Automation

Responsibilities

• Work across Security, Product, Engineering, Operations and Programme Functions that deliver Cyber Security and IAM teams work.
• Act as a trusted advisor and guide for colleagues across wider technology teams and the business.
• Maintain productive relationships with current vendors, potential vendors and other security groups outside Tesco.
• Continuously improve insight in your area of specialism and collaborate across teams to evolve approaches and tooling to achieve security outcomes.
• Communicate issues and lead alongside others to plan and execute large‑scale or complex remediation initiatives.
• Serve as the ultimate escalation point for other Security Analysts addressing complex operational issues, offering technical coaching and advice.
• Promote innovation and curiosity within the team.
• Author and contribute to Security Policies and Technical Standards within IAM, continually refining policies in line with emerging thinking and observed scenarios.
• Develop technical standards and supporting documentation to help Technology team members improve security posture over time.
• Identify, analyse and present data and insight to stakeholders across multiple teams to secure agreement on improvement opportunities.
• Generate remediation and improvement strategies at a company‑wide scale, establish execution plans and lead implementation together with others as a technical consultant.
• Act as the primary escalation point for IAM related opportunities and problems across all teams, demonstrating responsiveness for critical issues.
• Mentor others, ask challenging questions and foster growth in experience and understanding.
• Communicate complex concepts clearly within the team and across other business areas.
• Work comfortably with large‑scale datasets and data‑manipulation or business intelligence software, identify issues and drive improvements, and collaborate within wider groups as required.

• Significant experience in IAM with deep knowledge of Identity Governance & Administration, Identity Protection, Privileged Access Management, Authentication and Authorisation protocols, and key infrastructure access configuration.
• Security qualifications from recognised organisations such as CompTIA or SANS/GIAC, and other relevant technical qualifications.
• Willingness to learn continuously and embrace diversity of experience, valuing unique perspectives in discussion.