Role Overview

Key Responsibilities

Access Control & IAM

• Conduct periodic user access reviews and access recertification across applications, infrastructure, and business systems.
• Validate user access based on job responsibilities, role requirements, business justification, and the Principle of Least Privilege.
• Identify excessive, outdated, inappropriate, or unauthorized access and coordinate remediation.
• Ensure proper access provisioning, modification, and deprovisioning as per approved security procedures.
• Maintain complete audit records of access reviews, approvals, changes, and remediation activities.

Segregation of Duties (SoD)

• Ensure compliance with Segregation of Duties (SoD) principles to prevent conflicting or unauthorized access.
• Identify and review access conflicts across applications and systems.
• Coordinate with application/system owners to define appropriate risk mitigation or compensating controls.
• Maintain documentation and evidence related to SoD reviews and remediation.

Access Control & Security Reviews

• Review access control configurations for critical systems, production environments, and business applications.
• Validate security controls implemented across systems and applications.
• Identify access-control and security gaps and recommend appropriate remediation.
• Support audits and compliance activities by providing access-related evidence and documentation.

Jira Administration & Workflow Management

• Manage Jira-based access request processes and workflows, covering request creation, approval, validation, implementation, and closure.
• Configure and maintain Jira request types, workflows, fields, screens, permissions, notifications, and automation rules.
• Ensure Jira workflows align with business, security, and compliance requirements.
• Maintain complete audit history of access requests, approvals, workflow changes, and implementation activities.
• Create and maintain Jira reports and dashboards to track access requests, approvals, pending actions, SLA status, and compliance.

IT Security Governance

• Apply IT security knowledge to review and validate operational security controls.
• Support IT security governance, compliance, and audit requirements.
• Identify security risks and recommend improvements aligned with industry best practices and organizational requirements.
• Support implementation of security best practices across IAM, access governance, and operational security.

Process Improvement

• Continuously identify gaps, risks, and opportunities for automation in access management processes.
• Recommend improvements to strengthen access governance and reduce operational and security risks.
• Support automation and optimization of access review, approval, and certification processes.

Required Technical Skills

• Strong understanding and hands-on experience with Identity & Access Management (IAM) concepts.
• Experience in user access reviews, access certification, and entitlement management.
• Strong knowledge of Segregation of Duties (SoD) controls and access risk management.
• Hands-on experience with Jira administration, workflow configuration, request management, reporting, and dashboards.
• Good understanding of IT security controls and operational security practices.
• Knowledge of enterprise applications, infrastructure systems, and access control mechanisms.
• Ability to analyze access risks and recommend appropriate remediation actions.
• Strong understanding of access provisioning, modification, and deprovisioning processes.
• Good documentation, audit, compliance, and stakeholder management skills.

Preferred Experience

• Experience in NBFC, Banking, Financial Services, or BFSI organizations is preferred.
• Experience working with enterprise IAM/access governance environments.
• Exposure to security audits, regulatory compliance, and ITGC controls will be an advantage.
• Experience working directly with application owners, infrastructure teams, business stakeholders, and senior security leadership.

Candidate Profile

• Experience: 5–8 years
• Reporting: CISO
• Work Mode: Work from Office
• Industry: NBFC preferred
• Notice Period: Immediate to 1 month preferred
• Budget: Up to ₹16 LPA
• Candidates with 2–3 months' notice period should be avoided.
  
  

Key Competencies

• Access Governance
• Identity & Access Management (IAM)
• Access Certification
• Entitlement Management
• Segregation of Duties (SoD)
• IT Security Controls
• Security Governance
• Jira Administration
• Workflow Management
• Risk & Compliance
• Audit & Control Validation
• Process Automation
• Stakeholder Management