Senior Access Governance Specialist بدوام كامل في الإمارات العربية المتحدة
التخصص
تكنولوجيا المعلومات
نوع الدوام
دوام كامل
الخبرة
أي مستوى
الموقع
الإمارات العربية المتحدة
وصف الوظيفة
Job Title: Senior Access Governance SpecialistLocation: United Arab Emirates (Remote)Employment Type: Full-TimeWork Arrangement: 100% Remote — Work From HomeLevel: SeniorAbout the RoleWe are seeking an experienced and detail-oriented Senior Access Governance Specialist to oversee identity and access governance processes, strengthen access control frameworks, and ensure users have appropriate access to organizational systems, applications, and sensitive information. The successful candidate will support access lifecycle management, access certification, segregation of duties, privileged access oversight, and compliance with internal security policies.The ideal candidate will have strong expertise in Identity and Access Management (IAM), Identity Governance and Administration (IGA), role-based access control, access reviews, and security compliance. This position is designed for fully remote work, with responsibilities performed through secure enterprise platforms, automated governance tools, and virtual collaboration.Key ResponsibilitiesAccess Governance Framework: Develop, maintain, and improve access governance policies, standards, procedures, and control frameworks.Identity Lifecycle Management: Oversee access provisioning, modification, and deprovisioning processes for employees, contractors, vendors, and other authorized users.Access Certification: Coordinate periodic user access reviews and certifications to verify that access rights remain appropriate for users' current responsibilities.Role-Based Access Control: Maintain role-based access control (RBAC) models, business roles, technical roles, and access entitlement mappings.Segregation of Duties: Identify and assess segregation-of-duties (SoD) conflicts, recommend mitigating controls, and track remediation activities.Access Request Governance: Review access request workflows, approval hierarchies, authorization requirements, and evidence of business justification.Privileged Access Oversight: Coordinate governance activities for privileged accounts and ensure elevated access is approved, monitored, periodically reviewed, and removed when no longer required.Policy Compliance: Monitor adherence to access management policies, least-privilege principles, and established authorization standards.Governance Platform Administration: Support configuration, maintenance, and improvement of IAM and IGA platforms, access certification workflows, and governance dashboards.Audit and Compliance Support: Prepare access records, approval evidence, certification results, and remediation documentation for internal audits, external audits, and regulatory reviews.Risk Assessment: Evaluate access-related risks involving sensitive systems, critical applications, excessive permissions, dormant accounts, and inappropriate access combinations.Exception Management: Review access exceptions, document business justifications, coordinate approvals, and monitor exception expiry dates.Application Access Reviews: Collaborate with application owners and business stakeholders to validate user entitlements and remove unnecessary access.Control Monitoring: Track access governance controls, identify control weaknesses, and coordinate corrective and preventive actions.Joiner, Mover, Leaver Controls: Monitor the effectiveness of access changes associated with employee onboarding, transfers, role changes, and departures.Stakeholder Coordination: Work remotely with IT security, human resources, application owners, risk management, compliance, and business teams to resolve governance issues.Metrics and Reporting: Produce reports covering access review completion, overdue certifications, SoD conflicts, policy exceptions, remediation status, and control effectiveness.Process Automation: Identify opportunities to automate access reviews, approval routing, evidence collection, role maintenance, and governance reporting.Incident and Finding Remediation: Support investigations into inappropriate access, access control failures, and audit findings, ensuring issues are documented and resolved.Training and Guidance: Provide guidance to application owners, access approvers, and technical teams on access governance requirements and responsibilities.Qualifications and ExperienceBachelor's degree in Information Technology, Cybersecurity, Computer Science, Information Systems, or a related discipline.At least 5–8 years of relevant experience in access governance, IAM, IGA, information security, or IT risk and compliance.Strong understanding of identity lifecycle management, access certification, RBAC, least privilege, and SoD controls.Experience managing periodic access reviews and coordinating remediation of inappropriate or excessive access rights.Knowledge of IAM and IGA platforms such as SailPoint, Saviynt, Microsoft Entra ID Governance, or equivalent solutions.Familiarity with directory services, enterprise applications, privileged access management, and authentication technologies.Understanding of access-related security risks, audit requirements, and control testing methodologies.Familiarity with relevant security frameworks and standards, such as ISO 27001, NIST guidance, and applicable UAE regulatory requirements.Experience preparing governance reports, audit evidence, access review documentation, and risk assessments.Proficiency in Microsoft Excel and reporting tools; experience with Power BI, SQL, or workflow automation is an advantage.Strong analytical, documentation, problem-solving, and stakeholder management skills.Excellent written and verbal communication skills, with the ability to explain technical access risks to nontechnical stakeholders.High standards of confidentiality, integrity, and attention to detail when handling sensitive identity and access information.Relevant certifications such as CISA, CISSP, CRISC, or IAM/IGA vendor certifications are advantageous.Ability to work independently from home and collaborate effectively with geographically distributed teams using secure digital tools.Key Performance Indicators (KPIs)Access Review Completion: Achieve timely completion of scheduled access certification campaigns.Excessive Access Reduction: Reduce unnecessary, outdated, or inappropriate user permissions.SoD Compliance: Identify, document, and resolve segregation-of-duties conflicts within agreed timelines.Provisioning and Deprovisioning Compliance: Maintain adherence to approved access lifecycle procedures and required turnaround times.Audit Readiness: Ensure access governance records and approval evidence are complete, accurate, and readily available.Exception Management: Monitor access exceptions and ensure approvals, compensating controls, and expiry dates are properly maintained.Control Effectiveness: Improve the effectiveness of access governance controls and reduce recurring control deficiencies.Remediation Timeliness: Resolve access-related audit findings and governance issues within agreed deadlines.Process Efficiency: Improve access review completion rates and reduce manual governance activities through automation.Reporting Accuracy: Deliver reliable access governance metrics and management reports on schedule.What We OfferCompetitive compensation based on qualifications and relevant experience.100% remote working arrangement, with responsibilities performed from home through secure enterprise systems.Opportunities to work with modern identity governance, cybersecurity, and access management technologies.Professional development opportunities in IAM, IGA, IT risk, and security compliance.Exposure to enterprise access control frameworks, governance automation, and security assurance initiatives.A collaborative environment that values information security, accountability, continuous improvement, and professional growth.How to ApplyInterested candidates should submit an updated CV highlighting their access governance experience, IAM/IGA platform expertise, access certification responsibilities, and achievements in se
التعليقات
لا توجد تعليقات منشورة حتى الآن.