IAM Operations Manager (IC)

IAM Operations Manager (IC)

Responsibilities

• High level responsibilities include:
• Assist in the configuration and implementation of IAM systems and applications; assist with the installation of security software products for enterprise platforms.
• Perform user provisioning, authentication, and access governance adhering to established guidelines; develop and implement access control lists for specific computer resources; conduct regular reviews on user access authorization; provide technical support and troubleshooting when security or access problems occur.
• Maintain systems and access control lists and monitor all procedures and audit logs to protect data from unauthorized users; identify, report, and resolve common security violations; develop and implement security monitoring and violation reports that identify attempts to access unauthorized materials; conduct vulnerability assessments to improve security standards and procedures.
• Develop guidelines and reports on the usage, control, maintenance and auditing of information and computer resources.
• Educate, train, and support end-users and staff members on gaining security practice and procedure knowledge; maintain and distribute documentation and information on security-related practices; publish, monitor, and mandate information and computer security policies.
• Provide recommendations on mitigating or removing vulnerabilities within technology systems, while administering firewall components and implementing daily support network; schedule and supervise periodic network security assessments.
• Details:
• • Process approved UAR forms to provide and/or remove access from various platforms while following pre-established procedures
• • Perform certifications
• • De-provision access rights when users leave the company or transition into a different role that no longer requires access
• • Regularly review role entitlements to confirm no excess access rights are granted
• • Log and monitor remote access communications and use strong authentication and encryption to secure communications
• • Remove access rights to external applications when a user leaves the company
• • Grant remote access, including virtual private network (VPN) or virtual desktop infrastructure (VDI), only if a business need exists
• • Control use of remote access through management approvals and regular reviews
• • Work with internal and client-side resources to deploy and support Identity Governance in high-availability environments
• • Analyze and process the user access recertification campaign as per the bank’s standards to support the core business and infrastructure applications
• • Work with the business managers and system owners to update and ensure information is current
• • Define and create user access/activity reports, generate reviews for the managers, and collect all the artifacts for documentation purposes in a timely manner
• • Run daily reports and ad-hoc reports requested by senior managers
• • Administer/manage user access recertification tools to ensure the system is operational
• • Research evolving IAM techniques and tools in support of future IAM efforts
• • Stay current with information security program developments, industry frameworks, and changes in the bank that may impact the group
• Additional responsibilities may include the following:
• • Support preventive systems used to stop and/or deter security breaches
• • Participate in security assessments and reviews
• • Help maintain and facilitate a corporate wide security awareness program
• • Maintain familiarity with industry trends and current security practices

Education

• Degree or equivalent work experience equally preferable.
• Degree in computer science, technology, or related field.

Certifications

• [Include information as needed.]

Work Experience

• • Practical experience working directly within an identity and access management (IAM) team
• • Scripting skills
• • Experience in creating trending, metrics, and management reports
• • Experience working with leading IAM tools and services
• • Experience with the following web servers: Internet Information Systems (IIS), Apache, or IBM HTTP Server
• • Experience with the following application servers: WebSphere, JBoss, or WebLogic
• • Experience working in global, complex, matrix-managed organization
• • Experience in the banking or finance industries preferred

Functional Skills

• Understanding of identity and access management (IAM) principals, methodology, and solutions, including access control (role-based and discretionary), authentication, authorization, provisioning, approvals, and workflows
• Demonstrated knowledge of IAM functions such as identification, provisioning, de-provisioning, account recertification, privilege access management, and entitlement management
• Demonstrated ability to independently manage the user authorization request (UAR) queue
• Programming/debugging skills: Unix Shell, Perl, Java, JavaScript
• Knowledge of relational database management systems (RDBMS) and directory services (Lightweight Directory Access Protocol (LDAP), in particular active directory) including system architecture, configuration, and monitoring
• Data analysis skills in Excel (Visual Basic for Applications preferred)
• Understanding of security issues, application-level security, encryption, and vulnerabilities
• Excellent Excel skills (for example, macros, formulas, query from backend database)
• Control knowledge around access management and ability to articulate risk and impact
• Knowledge in industry and government security standards (National Institute of Standards and Technology (NIST), Center for Information Security (CIS), etc.)
• Solid understanding of system logical access and audit controls are desirable.
• Programming and scripting abilities; specifically in Pentaho (PDI), JavaScript, Perl, PowerShell
• Experience with presentation applications such as Tableau or QlikView preferred
• Strong database, operating system (OS), software engineering skills
• Strong background in use of ASP.Net, JScript, c#, RDBMS, Office Suite, Win2k8, AIX, RHL 5, xml, php, IIS, PowerShell
• Strong structured query language (SQL) background, ability to write complex SQL queries, stored procedures.
• Knowledge of RSA Identity Access life cycle governance is required
• Strong understanding of information security risk analysis, Identity Access Management and access control methodologies with working knowledge of business applications
• Ability to document and explain technical details in a concise, understandable manner

Foundational Skills

• Communicates effectively
• Identifies multiple paths to success through the development of analytical, critical thinking, and decision-making skills
• Exercises sound judgement and strives for continuous improvement
• Demonstrates optimism, resilience, flexibility, and openness to others' ideas
• Learns while doing
• Actively listens and asks thoughtful questions
• Leverages available technology to achieve efficiency and results
• Engages inclusively and with intent
• Always acts with integrity
• Analytical thinking
• Iterative problem-solving
• Serving as a trusted advisor
• Solid organizational skills with the ability to multi-task various initiatives and activities
• Ability to document and explain technical details in a concise, understandable manner

About MUFG

Mitsubishi UFJ Financial Group (MUFG) is an equal opportunity employer. We view our employees as our key assets as they are fundame