Job Summary

Under the direction of the Manager, Information Security Compliance, the IAM Analyst II drives Identity and Access Management efforts, partnering with IT and business teams to ensure that user access is managed in a secure, compliant, and efficient manner for the organization. This position impacts James River's cybersecurity posture, IT operations and business processes.

Duties and Responsibilities

• Continuously exhibit and uphold Core Values of Integrity, Accountability, Communication and Teamwork, Innovation and Customer Service
• Establish policies, standards and processes to support a secure, compliant and efficient identity and access management practice
• Review, authorize and execute user access requests in conjunction with company policies, standards and processes
• Maintain close working relationships and collaboration with IAM stakeholders, such as HR, service desk, infrastructure, application owners and the information security team
• Lead IAM platform administration and support
• Identify and spearhead opportunities to onboard applications and access into existing IAM processes and work with stakeholders to implement them; utilize IAM platforms and automation whenever possible
• Train junior staff on IAM-related systems and processes to continually meet IAM commitments to stakeholders
• Partner with IT, audit teams and information security management in the organization, performance and communication of IAM-related audits to ensure compliance with policies, standards and processes
• Serve as an advocate for Identity and Access Management across the organization and contribute to cybersecurity awareness activities
• Closely follow developments in IAM principles, best practices and tools and socialize with information security management
• Act as primary support for IAM-related systems, proactively identifying, communicating, resolving and documenting issues to continuously meeting IAM commitments to stakeholders
• Develop and execute access-related reports for the Information Security team to further IAM, cyber compliance and operations efforts
• Maintain a working knowledge of regulatory security control requirements that apply to IAM, such as Sarbanes-Oxley (SOX), etc.
• Other projects as assigned by management

Knowledge, Skills and Abilities

• Advanced proficiency in all of the below:
• Identity Governance & Administration principles & practices
• Application & process troubleshooting
• Agile development methodology & practices
• Intermediate proficiency in all of the below:
• Administration of cloud-based IAM platforms
• System and application communication technologies (API, SFTP, JDBC, SSH, etc.)
• Windows & Linux-based system administration
• IT Service Management methodology & practices
• Database queries and reporting
• Scripting (Python & PowerShell preferred)
• Familiarity with authentication & access standards (SAML, OAuth, OpenID Connect, etc.)
• Common operating systems & applications usage (Windows, Microsoft Office Suite, web apps, etc.)
• Cybersecurity principles and practices
• Ability to provide exceptional customer service
• Ability to build effective relationships with external partners
• Excellent written and verbal communication skills
• Skilled in active listening
• Attention to detail
• Continuous learning style
• Analytical and problem-solving skills
• Ability to convey technical process information in a clear and concise manner
• Demonstrated track record of continuous improvement
• Ability to work successfully as an individual contributor and also provide leadership within a team setting where necessary
• Ability to exercise sound judgment in making critical decisions
• Ability to identify and lead process and procedure improvement recommendations
• Ability to take direction from both management and team members

Education and Experience

• Bachelor's Degree in related field (IT, IS, Computer Science) or equivalent combination of education, training, and relative experience required
• Minimum of three years of Identity & Access Management experience required
• Certifications (Security+ or greater, CIAM or equivalent) preferred