Job Details

Job Title : Cyber Risk Management Business Analyst

Job ID : DDC-1515

Location : CA, REMOTE

Duration : 12+ months (Contract To Hire)

Need only USC / GCs.

Job Description :

• The Cyber Risk Management IAM Business Analyst (BA) will support the Identity and Access Management service, which seeks to create a delightful access experience that optimizes usability, accountability, and cyber risk exposure. This role requires a seasoned SailPoint BA that will perform comprehensive discovery and classification of all non-person identities in the IAM roadmap. This involves working with stakeholders in various teams (DevOps, Infrastructure & Operations, App Dev) to identify and assign ownership to non-person accounts.

Skills / Experience :

• Strong experience in business analysis within the IAM domain. Ability to gather and document requirements from stakeholders and translate business needs into functional specifications or process designs. A solid understanding of IAM fundamentals as they apply to both person and non-person accounts is required.
• Understanding of what non-person identities are and how they are used. Familiarity with the lifecycle of accounts.
• Hands-on experience with IAM tools, such as SailPoint IIQ and CyberArk. The candidate should know how such tools can be configured to manage account certifications, and reporting for accounts. Ability to run reports or configure access review campaigns in these systems is a plus.
• Proficiency in analyzing access data and identity records. Should be comfortable using spreadsheets, databases, or reporting tools to identify patterns. Attention to detail is crucial.
• Ability to design clear processes and workflows for identity management (e.g., a workflow for requesting non-person accounts). Excellent documentation skills are required to create policies, procedures, standards, and job aids that will be used by technical and non-technical teams.
• Excellent communication skills, both written and verbal. This role involves liaison between technical teams and business units; the BA must be able to articulate the importance of controls to non-technical stakeholders and relay business priorities to technical implementers. Experience running meetings or workshops to discuss requirements or review findings is important.
• Strong organizational and time-management skills. The role requires managing multiple initiatives simultaneously. The ideal candidate can prioritize tasks, handle project timelines, and work independently with minimal supervision.

Required Skills :

• Strong organizational and time-management skills. The role requires managing multiple initiatives simultaneously. The ideal candidate can prioritize tasks, handle project timelines, and work independently with minimal supervision.

Desired Skills :

• While this is not a hands-on engineering role, experience with scripting or basic programming with Python, Java or PowerShell can help in understanding automation of identity tasks. Knowledge of database queries or reporting tools can assist in pulling together identity data.
• Exposure to cloud environments (Azure, AWS, Oracle, GCP) and their native identity constructs (like AWS IAM roles, Azure service principals, etc.) is a plus.
• Skills or experience in project management can be beneficial, as this role will involve planning and coordinating improvements and tracking their execution. Formal PM experience isn't required, but being able to structure a project plan for, say, a company-wide service account cleanup initiative, will help.
• A demonstrated inclination to improve processes and adopt new technologies.