IAM/PAM Business Analyst

Overview

In this role you support a large IAM transformation for a leading bank, bridging business needs with technical delivery. You will analyze current IAM processes, drive governance improvements, and assist migration to a future-state IAM platform. You’ll collaborate with project managers, security teams, engineers and business stakeholders to ensure practical, compliant solutions. The position is hybrid in London, offering impact across people, processes and technology.

Pay / Benefits

• hybrid working
• London-based role
• Umbrella employment model

Responsibilities

• Analyse existing IAM processes, controls and procedures (CyberArk) to identify gaps and improvement opportunities
• Document and support implementation of enhanced IAM processes and governance controls
• Support migration planning and onboarding of applications and access models to a future IAM platform
• Elicit, document and refine requirements from technical and business stakeholders; translate needs into functional/non-functional specs
• Support RBAC initiatives, role design, access reviews and migration of permissions to the new IAM platform
• Analyse IAM-related datasets, perform data cleansing/comparison and support reconciliation
• Produce process docs, artefacts, user stories and implementation plans; support governance forums and project reporting
• Coordinate actions, milestones, risks and dependencies with Project Manager; manage smaller deliverables

Key requirements

• Strong analytical and data skills with IAM concepts, governance and access management experience
• Experience supporting identity and access management transformations and migrations
• Ability to elicit and translate business needs into technical requirements
• Experience working with RBAC and access governance improvements
• Stakeholder engagement across business and engineering teams
• Data analysis and validation skills related to IAM datasets

• Cross-functional collaboration
• Stakeholder management
• Clear communication
• IAM concepts and governance
• RBAC (Role-Based Access Control)
• CyberArk (as referenced)

…