Identity & Access Management Specialist

Overview The IAM Specialist will be in charge with managing and securing user and identities, access controls, and authentication mechanisms within the company. This role will be under Information Security Department and will require using industry-specific cybersecurity practices, applying regulatory requirements and implication in the improvement of the organization's overall cybersecurity posture. Position description:

• Implement, maintain, and manage IAM ecosystem, including definition of users rights and provisioning, authentication, and authorization mechanisms.
• Enforce least privilege principles and role-based access control mechanisms.
• Monitor user access and ensure timely provisioning and deprovisioning of accounts.
• Manage privileged access for high-risk accounts as well as non-person user accounts (RPA accounts, Service User accounts)
• Ensure working instructions align with regulatory requirements such as ISO 27001, NIS Directive, and DORA.
• Conduct periodic user access reviews, recertifications, and internal verification to detect and remediate security risks.
• Investigate and respond to IAM-related security incidents, breaches, and anomalies.

• Strong knowledge of IAM principles and concepts, including RBAC, SAML, LDAP, OAuth
• Good understanding of ZTA and Federation
• Hands-on experience with off-the-shelf IAM Tools (OKTA, SailPoint)
• 3-5 years of working in IAM, cybersecurity, or IT security within financial institutions, banks, or fintech organizations.
• Strong understanding of financial regulatory requirements related to cybersecurity and IAM.
• Minimum one cybersecurity (Security+, CIAM, CC) or vendor-specific (CyberArk, Sailpoint, Microsoft) certification.