IAM Access Provisioning Analyst

Role Purpose

Provides key representation for, and source of expertise on all issues with relevant subject matter. Work with our business partners (IAM teams around the Group) to implement effective information technology processes to achieve the business partner’s objectives. Delivery services in accordance with Service Level and Performance Level agreements. IAM Security processes are 24/7 and many are business critically fully migrated teams.

Key Responsibilities

Mainframe Access Administration

• Provision, modify, suspend, and revoke user access within RACF and ACF2 environments.
• Perform Joiner, Mover, and Leaver (JML) access administration activities.
• Create and maintain user IDs, groups, resource profiles, and permissions.
• Process access requests in accordance with approved workflows and Service Level Agreements (SLAs).
• Validate business approvals and ensure appropriate authorization before provisioning access.
• Support emergency and time-bound access requests in accordance with established controls.
• Maintain accurate documentation of all access administration activities.

Access Governance & Compliance

• Ensure compliance with Information Security policies, regulatory requirements, and internal control standards.
• Support periodic access certification and user entitlement reviews.
• Identify and escalate segregation of duties (SoD) conflicts and inappropriate access.
• Maintain audit evidence and support internal, external, and regulatory audits.
• Assist with remediation of audit findings and access control issues.

Operational Support

• Investigate and resolve access-related incidents and service requests.
• Perform analysis of provisioning failures and recommend corrective actions.
• Work closely with application owners, infrastructure teams, auditors, and security teams to resolve complex access issues.
• Participate in disaster recovery and business continuity activities affecting mainframe security administration.

Continuous Improvement

• Identify opportunities to automate manual provisioning activities.
• Contribute to process improvements, documentation, and standard operating procedures.
• Support IAM transformation initiatives and migration activities.

Required Skills & Experience

Technical Skills

• Strong working knowledge of IBM z/OS security administration.
• Hands-on experience with RACF and/or ACF2 user administration.
• Understanding of mainframe security concepts, resource protection, datasets, transactions, and security groups.
• Knowledge of access provisioning lifecycle (Joiner, Mover, Leaver).
• Understanding of Role-Based Access Control (RBAC), Least Privilege, and Segregation of Duties (SoD).
• Experience using ServiceNow or similar IT Service Management tools.
• Familiarity with Identity Governance and Administration (IGA) platforms such as SailPoint are desirable.
• Ability to interpret security policies and technical procedures.

Soft Skills

• Strong analytical and problem-solving skills.
• Excellent verbal and written communication skills.
• Ability to manage multiple priorities in a high-volume operational environment.
• Strong stakeholder management and customer service orientation.
• Attention to detail and commitment to accuracy.
• Ability to work independently and collaboratively within a team environment.

Qualifications

• 5–8 years of experience in Mainframe Security Administration, Identity & Access Management, or Access Provisioning.
• ITIL Foundation certification is desirable.
• Mainframe security certifications or IBM z/OS security training will be an added advantage.

Preferred Experience

• Experience administering RACF and ACF2 in large enterprise environments.
• Exposure to banking, financial services, or highly regulated industries.
• Experience supporting audit and regulatory requirements.
• Knowledge of privileged access management concepts.
• Experience with automation or scripting for mainframe security administration.

Key Performance Indicators

• Access requests processed within agreed SLAs.
• Accuracy and quality of provisioning activities.
• Compliance with audit and security requirements.
• Reduction in access-related incidents and rework.
• Customer satisfaction and stakeholder feedback.
• Successful support of access certification and remediation activities.