Security Analyst III - Identity & Access Management; Cloud Governance

Tesco UK
• Welwyn Garden City
• Hybrid
• Full‑Time
• Working hours 36

In this role you are responsible for continually improving insight in your area of specialism and collaborating across teams to evolve approaches and tooling to achieve security outcomes. Communication of issues and the ability to lead alongside others to plan and execute large‑scale or complex remediation approaches are central to this role. You are the ultimate escalation point for other Security Analysts seeking help with handling complex and novel operational issues, acting as a subject‑matter expert and offering technical coaching and advice.

Building an attitude of innovation and curiosity in others around you is key to this role.

• Using extensive IAM knowledge and a broader security perspective to address existing and novel issues; continually seeking to improve knowledge both theoretical and applied.
• Authoring and contributing to IAM security policies and technical standards, and continually improving them in line with emerging thinking and observed scenarios.
• Developing technical standards and supporting documentation to aid Technology team members and improve security posture.
• Working cross‑functionally to identify, analyse and present data and insights to stakeholders across multiple teams to gain agreement.
• Generating and executing remediation and improvement strategies of company‑wide scale, establishing plans and leading implementation.
• Acting as the ultimate escalation point for IAM‑related opportunities and problems across all teams, demonstrating responsiveness for important issues.
• Recognised as a subject‑matter expert in IAM, mentoring others and asking challenging questions to grow experience and understanding.
• Excellent communication skills, able to explain complex concepts both within the team and across other parts of the business.
• Comfortable working with large‑scale datasets and data‑manipulation/business‑intelligence software to identify issues and improvements, while working as part of a wider group when needed.

Significant experience working in IAM, knowledgeable across Identity Governance & Administration, Identity Protection, Privileged Access Management, Authentication and Authorisation Protocols, and access configuration of key infrastructure. Likely holding security certifications from CompTIA, SANS/GIAC or similar technical qualifications.

• Annual bonus scheme up to 20% of base salary.
• Holiday starting at 25 days plus a personal day, plus bank holidays.
• Private medical insurance.
• 26 weeks maternity and adoption leave (12 months service required at the qualifying date) at full pay, followed by 13 weeks of Statutory Maternity Pay or Statutory Adoption Pay, plus 6 weeks fully paid paternity leave.
• Free 24/7 virtual GP service, Employee Assistance Programme for you and your family, free access to experts supporting mental wellbeing.

We are proud to be an accredited Disability Confident Leader, where everyone's welcome.