IAM Governance Analyst - IAM, Cybersecurity, SOP, Okta, SailPoint, Governance - Remote
Hybrid
London, United Kingdom
Freelance
11-03-2025
Job Specifications
A large global organisation are in search of a IAM Governance Analyst to be responsible for overseeing the governance, risk, and compliance aspects of Identity and Access Management (IAM) internally. This person will ensure that access controls, policies, and procedures are aligned with regulatory requirements and industry best practices.
This will be an initial 3 months contract with the opportunity for extensions.
This position can be worked remotely with some possible on-site visits to London.
Key Responsibilities:
Governance and Compliance:
Help, implement, and maintain IAM policies, standards, and procedures to ensure compliance with regulatory requirements (e.g., GDPR, SOX, HIPAA, PCI-DSS).
Help, implement and maintain IAM Standard Operating Procedures (SOP)
Map IAM Controls to the IAM Standards and Policies.
Conduct regular audits and assessments of IAM processes to identify gaps and recommend improvements.
Access Management:
Oversee user access reviews, including role-based access control (RBAC) and entitlement reviews, to ensure appropriate access levels are maintained.
Collaborate with IT and business units to define and maintain user roles, permissions, and access rights.
Risk Management:
Identify and mitigate risks related to identity and access management.
Perform risk assessments and provide recommendations to reduce exposure to unauthorized access and data breaches.
Reporting and Documentation:
Generate and maintain detailed reports on IAM governance activities, including audit findings, compliance status, and risk assessments.
Document IAM processes, controls, and procedures to ensure transparency and accountability.
Key Skills:
3+ years of experience in IAM governance, cybersecurity, or IT risk management.
Proven experience with IAM tools and platforms such as SailPoint, Okta, Microsoft Azure AD, ForgeRock
Strong understanding of regulatory frameworks and compliance requirements.
Experience conducting audits, risk assessments, and access reviews.
About the Company
SAP & Technology Recruitment Specialists MRP Global provides SAP & Technology Professionals to global & local organisation that require contract and permanent recruitment services; we are able to source local and international resources taking into account language and cultural requirements. Experts in the delivery of SAP Recruitment services; SAP ECC, BI, HANA, Fiori, HCM, Successfactors, CRM, CRM C4C, SCM, BASIS Netweaver, Data Migration, ABAP, PI, Security, GRC, Hybris, Ariba Specialists in the SAP industry specific so... Know more
Related Jobs
- Company Name
- TESOL International Association
- Job Title
- Contract Security Manager BTGJP00004721
- Job Description
- Role Title: Contract Security Manager, ESN Duration: Contract to run until 09/07/2025 with a potential to move to perm Location: Bristol, Hybrid 3 days onsite 2 days remote Clearance required: BPSS, Eligible for SC Role Purpose / Summary The Emergency Services Network (ESN) is a major strategic priority and our commitment to connect for good for our customers and our country. The Security of the ESN is key to our customer and to our Emergency Services users. Availability of the network is a matter of life or death to the Emergency Services and they have to have confidence in the confidentiality and integrity of their communications and operations. We have to build and maintain effective security controls to prevent and detect a wide range of cyber and physical threats. This Job Matters Because It Manages the delivery of the ESN Security Management Plan, ISMS and Security Processes - ensuring effective management of security within the Programme and that Contract obligations are met. Works with other Security professionals and other teams to meet ESN security objectives. Engages with Customer security teams, providing assurance that Security requirements are met and identifying opportunities for improvement. Provides assurance that internal teams and suppliers have met ESN security requirements. In support of the above the ESN Contract Security Manager manages a team that contributes to the Group's overall Cyber Security risk management program, which is designed to ensure that the Group's technology systems and data are adequately protected. The role of the ESN Contract Security Manager is wide ranging and individuals need to prioritise across the four key components summarised below based on individual customer circumstance (life-cycle). Relationship Work across all security functions to orchestrate and lead our customer contact strategy. Build strong relationships with Customer Security Team or equivalent with the aim of becoming a trusted security advisor. Delivery Maintain oversight of delivery activities including in-life contract change requests. Ensure delivery against all contractual Security obligations. Service Maintain oversight of Security in-life delivery performance against compliance, obligations and risks. Translate the output of any PIRs into improvement plans. Commercials Maintain oversight of all contract commercials including Revenue, CCRs and BRF to maximise profitability. Contribute to demand generation as outcome of trusted advisor status. Key Skills/ Requirements Have a proven track record in security management (3-5 years) Have demonstrable experience implementing and managing ISO Certifications (eg 27001) Experience with evaluating policies and procedures Security Incident Reporting Knowledge of mobile networks up to 5G is extremely desirable Complying with security obligations Security assessments Security Risk assessments Security testing Reporting issues with compliance to customer All profiles will be reviewed against the required skills and experience. Due to the high number of applications we will only be able to respond to successful applicants in the first instance. We thank you for your interest and the time taken to apply!
- Company Name
- Infoplus Technologies UK Limited
- Job Title
- Security Operations Center (SOC) Analyst
- Job Description
- The Role: SOC Analyst Location: Reading, UK - Hybrid Role type: Inside IR35 Contract Position Job Description: We are looking for a hands-on, technical analyst, to join our SOC team and help us establish monitoring and alerting for our OT estate. They must have SOC experience, ideally using Microsoft Azure & Sentinel SIEM, and must have a good understanding of OT infrastructure. Furthermore, any exposure or experience to Claroty is of significant interest. The responsibilities for this role will include, at a high level: • Configuring Microsoft Sentinel analytical rules (KQL) • Building SOPs, runbooks and procedures for addressing and responding to alerts • Cross-training the IT SOC in OT technologies and alerting • Working with OT teams to ensure adequate log coverage and ingestion and remediation activities.
- Company Name
- Square One Resources
- Job Title
- IAM Security Architect
- Job Description
- Job Title: Oracle IAM Security Architect - Inside IR35 Location: London - 2 Days per week Start Date: April Job Type: Contract We are looking for a seasoned Oracle Cloud Infrastructure (OCI) IAM Security Architect to join our dynamic team. In this role, you will play a pivotal part in designing, implementing, and managing secure identity and access management solutions on Oracle Cloud. Key Responsibilities: Oracle Cloud IAM Architecture Design: Lead the design and development of robust, scalable, and secure IAM solutions using Oracle Cloud Infrastructure services such as Identity and Access Management (IAM), Key Management Service (KMS), and Directory Service. Security Strategy & Compliance: Develop and maintain a comprehensive IAM strategy that aligns with Oracle's cloud security best practices and meets industry standards and regulatory requirements, as well as aligning with client's business needs. Secure Deployment & Integration: Ensure secure deployment and integration of IAM solutions with existing OCI services and third-party/business applications. Project Management: Oversee the lifecycle of IAM projects from initiation through to deployment and maintenance, ensuring timely delivery within budget and adherence to security guidelines. Risk Assessment & Mitigation: Regularly evaluate the security posture of IAM systems, identify potential risks, and implement effective mitigation strategies. Team Leadership & Mentoring: Provide technical guidance and mentorship to the wider security and technical teams, fostering a culture of continuous learning and innovation. Documentation & Reporting: Create and maintain accurate and up-to-date documentation of IAM architecture, policies, procedures, and configurations. Present designs for reviews and provide regular updates to senior management. Qualifications: Experience of working in UK public sector with valid/current UK Security Clearance. Experience wiith Oracle Cloud Infrastructure. In-depth knowledge of OCI services, particularly IAM, KMS, and Directory Service, and their implementation in secure, multi-tenant environments. Solid understanding of identity and access management principles, protocols, and standards, including OAuth, OpenID Connect, and SAML. Familiarity with security frameworks like NIST, ISO 27001/27002, CIS, and SOX. Proficient in Scripting languages (Python, Java, etc.) and familiar with cloud automation tools and DevOps practices. Outstanding problem-solving skills, excellent communication abilities, and proven capability to work effectively with teams at all levels. Oracle Certified Professional, Oracle Cloud Infrastructure - Identity and Access Management (IDCS) is highly desirable. Knowledge of integration patterns between oracle integration cloud and oracle fusion application an advantage If you are interested in this opportunity, please apply now with your updated CV in Microsoft Word/PDF format. Disclaimer Notwithstanding any guidelines given to level of experience sought, we will consider candidates from outside this range if they can demonstrate the necessary competencies. Square One is acting as both an employment agency and an employment business, and is an equal opportunities recruitment business. Square One embraces diversity and will treat everyone equally. Please see our website for our full diversity statement.
- Company Name
- Sanderson
- Job Title
- Senior Security Analyst - Microsoft E5/Sentinel
- Job Description
- Senior Security Analyst - Microsoft E5/Sentinel Rate - £400/£450 Inside IR35 (Total to umbrella) Duration - 6 months Location - Hybrid into London or Middlesbrough (Infrequent travel per month) A complex organisation that we work with extensively is looking for a Senior Security Analyst proficient in Microsoft E5, Sentinel and Defender (security operations perspective) to join them and work on triage incidents and optimisation to improve processes and detection rules. You will: Handle triage incidents. Understand Microsoft E5, Sentinel and Defender capabilities (Automation, Threat, Rules, Access). Assist with Microsoft E5, Sentinel and Defender optimisation. Use previous experiences to ensure best practices are upheld and improve processes. Liaise and escalate with stakeholders and team members regarding incidents. Skills and Experience required: Microsoft E5, Sentinel, Defender configuration and optimisation. Security analysis. Stakeholder management. Sentinel SOC experience - implementation, triage, security, utilisation, deploy controls, maintenance. Please apply in the link provided if suitable.