Identity and Access Management (IAM) Business Process Specialist – Information Security

Identity and Access Management (IAM) Business Process Specialist – Information Security – Technology Group–254266

Federal Reserve Bank of New York

Primary Location NY-New York City

Full-time / Part-time Full-time

Employee Status Regular

Overtime Status Exempt

Job Type Experienced

Travel No

Shift Day Job

Area Overview:

The position is that of the Compliance Expert of the Bank’s Identity and Access Management (IAM) group, which resides within the Information Security Function. The position’s primary objective is to develop an active compliance monitoring program for Access Management across the Bank. The candidate will work closely and collaboratively with the Bank’s business areas and control functions to develop, integrate, and apply technical IAM solutions towards an optimum future state design, accomplished through a multi-phase portfolio of projects. The scope includes the protection of mission-critical applications and systems that support market operations, financial institution supervision, services to banking organizations, services to the U.S. Treasury Department, and internal Bank operations.

The successful candidate will be a self-motivated individual who has extensive understanding of IAM technologies, concepts, policies, processes, best practices, and solutions. The candidate will design and implement a compliance program for access management. The IAM Program success will be based on data analysis, identified risk remediation and compliance analysis across all business units. The candidate should also have working knowledge of the broader information security field, including the cyber threat environment.

This position requires Possession of or the ability to obtain and maintain national security clearance which requires U.S. Citizenship

Principal Duties and Responsibilities:

Develops compliance approach and reporting for risk based Access Management
Analyze and report on IAM compliance trends and emerging risks
Automates compliance events for active monitoring using Sailpoint and other technologies
Works collaboratively across the business departments to identify and fix compliance issues
Develops and implements security standards, procedures, and guidelines for multiple platforms and diverse systems environments (e.g., corporate, distributed and client server systems).
Reviews the development, testing, and implementation of security plans, products, and control techniques.
Investigates and recommends appropriate corrective actions for data security incidents.
Provides technical expertise and support to client and IT management and staffs in risk assessments and the implementation of appropriate data security procedures and products.
Maintains an awareness of existing and proposed security standard setting groups, State and Federal legislation and regulations pertaining to information security.
Excellent communicator in writing and in person, able to communicate difficult technical issues to stakeholders and higher management

Qualifications/Requirements:

Proven experience driving standardization to support business activities while maintaining security of the application and data systems
3+ years of technical experience integrating identity management, access management and access governance software into infrastructure and applications
Expertise in technical implementation of a centralized IAM program to improve access controls across information systems while ensuring alignment with existing security policies
Experience in implementing access controls and monitoring compliance across Windows, Linux, AIX, Openshift PaaS and Cloud (AWS/Azure) systems.
Experience implementing monitoring dashboards for event-driven IAM compliance in tools such as Sailpoint, Splunk, etc.
Proven ability to stand-up an automated compliance program for a medium size, but highly complex organization
Expert knowledge of Active Directory, Oracle Enterprise Directory, SAML , Single Sign On and Multi-Factor Authentication technologies
In depth understanding of IAM best practices for integrating Java, Sharepoint and other applications with Active Directory
Knowledge of technology trends and developments in the areas of IAM, and knowledge and experience with formal security and control frameworks such as ISO 17799, COSO, ITIL, and NIST SP 800-53 that have applicability to the discipline
In depth understanding of capabilities and limitations of a wide range of technologies, platforms, architecture, methodologies; well-versed in current and emerging information security technologies;
Experience with Cloud Identity as a Service such as Microsoft Azure Active Directory, and Identity Federation protocols such as SAML2, WS-Federation, OAuth 2, OpenID Connect, etc.

Education/Certifications:

Bachelor’s Degree in a relevant field of work or 7-9 years of equivalent work experience
Possession of a CISSP/CISM or similar security certification

The Federal Reserve Bank of New York is committed to a diverse workforce and to providing equal employment opportunity to all persons without regard to race, color, religion, national origin, sex, sexual orientation, gender identity, age, genetic information, disability, or military service.