Full-Time Access Management Lead

As our Access Management Lead, a new position within the Enterprise Technology Controls Team, your primary focus is to support the Director of Enterprise Technology Controls to drive the compliance and improvement of the User Access Management strategy and manage and enhance Informa’s access controls to ensure they remain effective.

You will have a strong understanding of the general IT controls relating to the domain of access of programs and data, and the Shared Service Organisation Process Control environment, including the Risk and Control Matrices, to understand the business risks that are presented, and how these can be appropriately mitigated by the use of access controls.

You will ensure that the Group policies are adhered to for the applications within the remit of the Enterprise Technology Controls Team, and that the access controls are operated effectively to reduce or fully mitigate identified risks.

Key Outputs and Outcomes

• Design and enforce access controls to ensure compliance with key group policies, such as the Identity and Access Management policy to enforce the Principle of Least Privilege
• Support building awareness of user access management standards across TS&S, including participating in overall design, support management of policies and provide user access management recommendations for companywide projects.
• Responsibility and ownership for maintaining and enhancing the Segregation of Duties rulesets, collaborating with the SAP GRC Technical Specialist and the Oracle Controls Lead to manage ruleset updates, driving changes to ensure risk alignment and eliminate any false positives
• Drive the Segregation of Duties assessments for role changes and new developments, and manage the cross-system Segregation of Duties across the Enterprise Technology applications landscape
• Support the management and operation of the SAP Governance, Risk and Compliance (GRC) tool.
• To run and interrogate access risk analysis reporting for SAP and Oracle across the current role design and end user assignments via ARA reporting and User/Role simulations.
• Actively seek opportunities for access control improvements such as the use of automation and new technologies that would benefit Informa
• Responsibility for operating the user access reviews process across the Enterprise Technology Applications
• Support security requirements gathering and analysis for in scope applications
• Provide 1st line support to internal and external partners, assisting with their review of the access management controls
• Be a trusted guide and support for other internal teams in designing effective access controls, including providing training where required
• Development and maintenance of access control procedures
• Provide support for any User Access Control incidents
• Seek opportunities to ensure that personal user access management and controls knowledge is kept up to date and remains current

Measures of Success

• Strong, robust and consistent access controls operation across Enterprise Technology applications
• Continue to see a reduction in user access management related incidents
• Positive audit results and a continued reduction in the deficiencies being noted

Practical knowledge of General IT controls and security principles essential, including change management procedures and access controls

Proven experience of access control management essential

A minimum of 2 years of related work experience in a multi-national company

A motivated self-starter who can prioritize and work autonomously as well as being a team player.

Good knowledge and understanding of business process risks across Purchase to Pay, Order to Cash, Record to Report and Hire to Retire gained within a Shared Service Centre Organisation or CoE operating model

Relevant security qualification preferred (CC, CompTIA Security+, SSCP etc) or demonstrated technical capability at this level.

What is the last date for applying to the job?

Which countries are accepted for this remote job?