Full-Time Sr. Technical IAM Analyst

Job Title: Sr. Technical IAM Analyst

Job Location: Remote

About The Job: The Client Contingent Worker program is seeking a Senior Analyst, Identity and Access Management (IAM). Assignment reports directly to the Manager, Identity and Access Management (IAM). This role is a key member of the information security team and is responsible for the design and operations of key identity and access management controls at Sandy Spring Bank.

IAM controls are essential to ensure access is granted on a least privilege basis to all internal and cloud-based systems. IAM controls compliance with internal policies and external regulations are a critical part of Sandy Spring providing services to its customers while protecting their personal information.

The scope of the IAM program includes internal infrastructure systems and applications, and Software as a Service (SaaS) applications.

The Senior Analyst, IAM will ensure identity and access management controls in SSB are effective in their operation and will lead efforts to define and implement control improvements that reduce risks and increase efficiency.

Areas of Focus

1. Develop and operate a comprehensive identity and access management program to address the following key control needs:
   • Identity Lifecycle Management, Automated Provisioning and Reconciliation
   • Auditing, Reporting and User Activity Monitoring
   • Access Certification of access to in-scope resources
   • Segregation of Duties
   • Break Glass, Password vaulting
   • Privileged Access Management
   • SaaS access reporting for access review
   • Single Sign On
2. Identify enhanced IAM capabilities and control process requirements and evaluate automation tools that will be necessary to implement them. Work with vendors and infrastructure engineering to install and configure the selected toolset.
3. Develop, maintain, and implement IAM policies, IAM standards and standard operating procedures. Work with first line information security teams, second line technology risk teams, human resources and business application owners to define and implement controls that meet information security program policy, risk management and regulatory requirements.
4. Manage end user and system accounts, user access groups, roles and entitlements using applicable tools and applications.
5. Manage, report, and facilitate access certification across all business areas of Bank.
6. Define a process for and support the onboarding of new vendors, systems and technology products in order to ensure that all IAM policies are met in a consistent manner.
7. Liaise with regulators, second line risk teams and Internal Audit teams as part of responding to their requests to walk through control processes and to gather and present evidence of control operation.
8. Ensure that significant findings related to IAM control effectiveness are remediated timely. Self-identify issues when applicable and identify dates for remediation.
9. Collaborate directly with senior members of SSB Business and IT to execute on a roadmap for uplifting the maturity of SSB IAM processes as part of the Information Security program.
10. Provide regular reporting with metrics on the status of the IAM processes and liaise with internal audit, external regulatory examiners to demonstrate the design, operation and effectiveness of all IAM controls.
11. Secure access to SaaS systems leveraging cloud native tools and built in SaaS service capabilities.
12. Integrate IAM controls with devops processes at SSB.
13. Support a 24/7 coverage schedule by rotating with other team members including weekends.

What is the last date for applying to the job?

Which countries are accepted for this remote job?