Role Purpose
The purpose of this role is to analyse, identify, rectify & recommend specific improvement measures that help in the security posture of the organization by protecting the sensitive information
Do
Key Responsibilities:
1. Perform regular reviews of user access rights to ensure compliance with company policies and industry regulations.
2. Analyze access permissions and entitlements to identify any discrepancies or violations.
3. Collaborate with cross-functional teams to investigate and resolve access-related issues promptly.
4. Document findings and recommendations from access reviews, and provide actionable insights to stakeholders.
5. Implement and maintain access control processes and procedures to enhance security and minimize risks.
6. Conduct Segregation of Duties (SoD) analysis to identify and mitigate conflicts in user access rights, ensuring adherence to regulatory requirements.
7. Develop and maintain comprehensive documentation of access review processes and outcomes for audit purposes.
8. Work closely with IT and security teams to streamline access management processes and improve efficiency.
9. Being proactive and assist in process improvement steps including automation.
10. Participate in internal and external audits, providing necessary information and support related to access controls.
Stakeholder coordination & audit assistance
Liaise with stakeholders in relation to cyber security issues and provide future recommendations
Maintain an information security risk register and assist with internal and external audits relating to information security
Assist with the creation, maintenance and delivery of cyber security awareness training for colleagues
Advice and guidance to employees on issues such as spam and unwanted or malicious emails
Stakeholder Interaction
Stakeholder Type Stakeholder Identification Purpose of Interaction
Internal Technical Lead/ Project Lead Regular reporting & updates
Security Intelligence (Practice) Coordination for security reasons
External
Customer
To coordinate for all security breaches & resolutions
Display
Lists the competencies required to perform this role effectively:
Functional Competencies/ Skill
Leveraging Technology – Knowledge of current and upcoming technology (automation, tools and systems) to build efficiencies and effectiveness in own function/ Client organization – Expert
Process Excellence – Ability to follow the standards and norms to produce consistent results, provide effective control and reduction of risk – Expert
Functional/Technical – Knowledge of Network Security devices, firewalls, end points, SIEM, application security, IPS/IDS, VA / PT skills – Master
Competency Levels
Foundation Knowledgeable about the competency requirements. Demonstrates (in parts) frequently with minimal support and guidance.
Competent Consistently demonstrates the full range of the competency without guidance. Extends the competency to difficult and unknown situations as well.
Expert Applies the competency in all situations and is serves as a guide to others as well.
Master Coaches others and builds organizational capability in the competency area. Serves as a key resource for that competency and is recognized within the entire organization.
Behavioral Competencies
Effective Communication
Collaborative Working
Execution Excellence
Problem Solving & Analytical Skills
Deliver
No. Performance Parameter Measure
1. Customer centricity Timely security breach solutioning to end users, Internal stakeholders & external customers experience
2. Process Adherence Adherence to SLA’s (90-95%), response time and resolution time TAT
UAM – User Access Management