Senior Identity and Access Governance Analyst

This is a fully remote position, open to applicants in Brazil.

📋 Description

• Develop, review, and sustain Identity and Access Management policies, standards, procedures (SOPs), and workflows, including the design and export of BPMN processes.

• Perform monthly and quarterly access reviews, submit them to leadership, follow up on responses, and formally document evidence.

• Construct and uphold the access matrix for each system alongside the SoD matrix.

• Assist in the centralization of systems in IGA/IAM by mapping owners and sub-owners, interviewing stakeholders, and training the IAM team.

• Supervise the password vault and privileged access management (PAM), including processes, access matrices, licenses, reports, and training.

• Oversee non-human, shared, service, and AI accounts, monitoring the lifecycle of digital certificates.

• Ensure the implementation of SSO and MFA controls, monitoring vendors and adoption by system.

• Identify and rectify access discrepancies and open incidents when necessary.

• Gather monthly ISMS metrics and uphold IGA compliance with PCI DSS, SOX, SOC 2, ISO 27001/27002, and BCB Resolution 85/2021.

• Assist with internal and external audits and security committees within the IGA scope.

• Automate IGA routines using workflow tools such as n8n.

• Foster an IGA security and awareness culture throughout the organization.

⛳️ Requirements

• Proven experience in Identity and Access Management (IAM, IGA, PAM, SSO, MFA).

• Experience in implementing and maintaining RBAC and SoD matrices.

• Understanding of the identity lifecycle and processes for access review and certification.

• Familiarity with privileged access management, shared accounts, service accounts, non-human identities, and AI identities.

• Knowledge of IAM policies, standards, and procedures, with the capacity to document them clearly.

• Familiarity with IGA/IAM controls under PCI DSS, ISO 27001/27002, and BCB Resolution 85/2021.

• Knowledge of IGA/IAM tools, password vaults, and access management solutions.

• Basic understanding of cloud architecture and technology environments.

• Strong empathetic communication, active listening, and negotiation skills.

• Preferred: Demonstrated experience with PCI DSS and SOX in IGA/IAM controls.

• Preferred: Hands-on experience implementing SSO and PAM solutions, such as Senhasegura, and password vaults like Keeper.

• Preferred: Familiarity with n8n automation and the use of Jira, Confluence, and Zendesk.

• Preferred: Experience in financial or payment institutions regulated by the Central Bank.

• Preferred: Certifications and courses in IAM, ISO 27001, or information security.

🏝️ Benefits

• Option for remote work/home office.

• 8-hour workday from Monday to Friday.

• Employment in accordance with Brazil's CLT labor regime.