Regularly inspect the Access Management life Cycle, including the access provisioning, de-provisioning and modification for those who have access to OEG Critical Applications.
Review the users identities and work with the applications Business Owner, Technical Owner and Access management to perform the required corrective / preventive actions.
Participate in implementing and operating the IAM platform with its connections to the critical applications, including Single-Sign-On configuration (SSO), do the required automationetc.
Plan, build, test and apply IAM security controls.
Generate reports to perform in-depth analysis and data collection for issues associated with IAM.
Business Roles Management:
Work with the Application Business Owner to develop and ensure the implementation of the applications Role Based Access Control (RBAC) and Segregation of Duty Matrix (SoD).
Responsible for reconciling the discrepancies between the applications access rights assigned to the users and what theyre eligible to, based on the information existing in the approved RBAC.
Follow-up with the Technical owners to ensure all required actions are properly applied on the System.
OEG Technology Projects:
Participate in launching new projects by highlighting and ensuring the implementation of the IAM security standard.
Incident Response:
Respond to IAM-related security incidents, investigate any violations or security breaches, participate in finding the root cause, and recommend the corrective and preventive actions.
Audit (internal, External and Group Audit):
Respond to internal, external, and Orange Group audit requests providing the required evidence
JOB REQUIREMENTS:
Bachelors degree in computer science, information Systems, or equivalent.
At least 2 years of experience in Identity and Access Management (IAM), preferably in the banking industry.
Hands-on experience should include the design and development of the Access Management Process, developing the applications Role Based Access Control (RBAC), and the Segregation of duties (SoD) matrices.
Professional level in Microsoft Excel.
Good knowledge in operating IAM platforms to automate the relevant activities is a plus.
CISA certification or equivalent is a plus.
Good knowledge in applying and auditing ITN Governance, Risks and Compliance is a plus.
Ability to work with different OEG teams that have different business and knowledge backgrounds (Technology, CBU, Customer Care, Finance..... etc.).
