Client: Urgently hiring for our client (BIG3), Permanent with client

Role: Cybersecurity Senior Analyst Identity Risk & Remediation

Job Description :

- 4+ years of experience in Identity & Access Management (IAM), Identity Governance & Administration (IGA), or Cloud Security Analytics.

- Strong focus on identity intelligence, risk prioritization, and measurable risk reduction (this is an analytical security role, not a traditional SOC alert or pure IAM operations role).

- End-to-end experience in triaging, classifying, and owning identity and entitlement findings across both human and non-human identities.

- Deep understanding of cloud identity security concepts across AWS or Azure platforms (such as SCPs, Permission Boundaries, Entra ID PIM, and Cross-Account Access Reviews).

- Proficient with Cloud Infrastructure Entitlement Management (CIEM) concepts and high-signal identity tools (such as SailPoint, Saviynt, CyberArk, Wiz, Sonrai Security, or Microsoft Entra ID Governance).

- Strong ability to analyze complex access relationships, identify drivers of identity risk (including excessive privilege and toxic combinations/Segregation of Duties violations), and translate graph-based identity insights into clear risk narratives.

- Experience building and maintaining risk playbooks, escalation criteria, remediation guidance (like access right-sizing), and severity thresholds.

- Excellent troubleshooting and problem-solving skills required for rapid access risk analysis and posture remediation.

- Excellent written and verbal communication skills; able to translate technical noise into plain-English risk decisions and collaborate effectively with IAM, Cloud Security, GRC, application owners, and global senior stakeholders.

- Willingness to transition fully into a specialized, cloud-native IAM security and risk thinker role.

What We Are Looking For :

- An analyst mindset focused on findings, analysis, and risk mitigation rather than manual ticket execution.

- Strong alignment with Least Privilege principles, Access Certifications, Role Mining, and Just-In-Time (JIT) access governance.

- Proven background clearing cloud platform identity checks (specifically AWS and Azure).

What We Are NOT Looking For :

- Pure Tool Implementation, Engineering, or Infrastructure Architecture profiles (builders and designers are out).

- Pure Vulnerability Management professionals (vulnerability scanning, patch management, and pen-testing are treated as a separate domain).

- Pure IAM Operations or Service Desk support profiles with no security lens (no heavy focus on Active Directory/ADFS administration, password resets, or L1/L2 user provisioning support).

- Oracle Cloud-only (OCI) experience without verified AWS/Azure expertise.