Identity and Access Management Analyst

The Identity and Access Management team sits within Admiral’s IT department, and are responsible for ensuring timely, appropriate, and controlled access to our networks, systems, and applications across a hybrid on-premise/Cloud environment. This involves the administration and management of accounts through their lifecycle, from creation to de-provisioning and maintaining access in response to change.

The successful candidate will have strong IAM experience with the ability to focus on Governance and Risk controls, utilising their analytical and data management skills with a security-focused mindset. In addition, they will have the ability to provide excellent customer service, prioritise a variable workload to meet deadlines, be self-motivated and flexible in their approach to work, with great attention to detail. 

There are several projects underway across both IAM and PAM which will impact identity and access management, making it an exciting time to join the team as there will be the opportunity to contribute to the role and team’s development. 

You will:

• Work closely with the IAM Administrators to ensure compliance with Governance, InfoSec, and regulatory requirements.
• Ensure access to applications, systems and networks is appropriate and controlled for legitimate business reasons. 
• Drive continuous improvement of user access controls, standardising and automating (where possible) aspects of managing identities, saving time, and reducing risk. 
• Drive and maintain Role-Based Access (RBAC) to allow users to access the information necessary to effectively perform their job duties whilst maintaining the principle of least privilege.
• Engage with IT Governance and IT Tribes for any application onboarding, identifying IAM components and requirements.
• As a member of the wider IT Support team; support operational priorities and assist other teams across the department where required.

Main Duties

• Administration of Identity Services including Active Directory, Azure AD, Google Cloud Platform.
• Troubleshoot and manage issues related to identities, systems access, accounts, and permissions.
• Review user access periodically to maintain compliance with Governance and Information Security standards and policies.
• Maintain the user access review schedule according to new or changing requirements e.g. new applications being onboarded or new Security guidelines implemented.
• Combine data from multiple sources (i.e. HR and IT applications) to produce the reports used in managing user access controls.
• Work closely with audit teams to ensure that methodology used in the IAM processes is robust and suitably evidenced.
• Support the implementation of new or improved access control processes.
• Responsible for the documentation of processes and procedures that are specific to the scope of responsibilities, ensuring document compliance with Quality Standards.
• Maintain and drive role-based access control.
• Assist other teams within IT to support operational requirements.
• Mentor and train junior team members in any aspects of IAM required.  
• Project engagement for new Applications/ systems, ensuring IAM requirements are considered and implemented.
• This is not a full definition of the role but covers the main aspects and drivers for success.

Essential Requirements

• Previous experience of working with Identity & Access Management (IAM/IDAM), ideally in a regulated environment such as the finance sector.
• Strong knowledge of identity management systems including Active Directory, Azure Active Directory, and Google Cloud Identity.
• Understanding of Identity Access Management and PAM best practices, processes, and controls including recertification, toxic combinations, and role-based access control.
• Competent in using reporting tools and/or Excel; creating and manipulating large volumes of data.
• Good analysis and administration skills with excellent attention to detail.
• Excellent organisational skills with the ability to plan and prioritise work without supervision, managing workload effectively.
• Strong communicator with experience working with end-users (including senior executives).
• A strong desire and focus on continuous improvements and personal development.
• Team player with the ability to work autonomously, flexibly, and with enthusiasm.
• The following skills are desirable, but not a requirement:
• Experience in management of Privileged users through a Privileged Access Management (PAM) solution.
• Experience of using Windows PowerShell and creating scripts.

Interviews

CVs will be reviewed as soon as we can and interviews will likely being in early January.

Our Commitment to You

At Admiral, we are committed to being a diverse and inclusive workplace. Admiral is proud to be an equal opportunities employer and does not discriminate on the basis of race, sex (including pregnancy, childbirth, reproductive health decisions, or related medical conditions), national origin, gender, gender identity, sexual orientation, disability, age, or any other legally protected status.

All qualified applicants will receive equal consideration for employment.

Salary, Benefits and Work-Life Balance

We do not have a set salary for this position, as it will be dependent on the successful candidate’s experience. We are happy to see CVs from all candidates who meet the requirements and will be happy to discuss the remuneration package.

At Admiral, we are proud to be a diverse business where we put our people and customers first. We have great benefits to ensure employees have a great work-life balance; it's one of the reasons we’re consistently voted one of the Sunday Times Best Big Companies to Work For in the UK.  We want you to have an element of freedom to define a working lifestyle that supports this, so accommodate flexible hours wherever possible.

All colleagues will receive 33 days holiday (including banks holidays) when they join us, and this will increase with length of service, up to a maximum of 38 days (including bank holidays). You also have the option to buy or sell up to five days of annual leave in addition to your allocation.

You can also view some of our other key benefits here.

#LI-CH1