IAM & Risk Governance Analyst

Admiral Europe Tech; Andalucía; Presencial; EUR 42.000 - 62.000; Jornada completa

Descripción de la vacante

Admiral Europe Tech is seeking an IAM Governance Analyst to bridge security engineering and business operations. Focused on IAM GRC, you will automate manual workflows using Python and AWS Lambda/Step Functions to improve control effectiveness and documentation.

You will design policies, perform access reviews, and act as a liaison with IAM teams, business owners, and auditors, driving small to mid-size security initiatives with clear status updates.

Formación

• Experience in IAM governance, risk, and compliance.
• Ability to document governance requirements for cloud environments and enterprise apps.
• Strong scripting skills in Python.
• Experience with RBAC and access reviews.

Responsabilidades

• Design and maintain identity policies and RBAC matrices.
• Conduct access reviews and audits.
• Coordinate with IAM, business owners, and auditors.
• Develop automated governance workflows using Python and AWS services.

Conocimientos

IAM governance

GRC

Risk management

Compliance

Python

AWS

Automation

Herramientas

AWS Lambda

AWS Step Functions

Descripción del empleo

We are seeking an IAM Governance Analyst who combines strong risk and compliance expertise with a modern, automation-first mindset. In this role, you will bridge the gap between technical security engineering and business operations, ensuring our cloud infrastructure and specialized applications remain secure, compliant, and well-documented. While the primary focus is on IAM Governance, Risk, and Compliance (GRC), we are actively looking for a professional who also leverages technical skills (Python, AWS Lambdas) to automate manual workflows, build control efficiencies, and support our IAM Tech teams with a governance approach.

Key Responsibilities:

IAM Governance, Risk & Compliance:

• Design, implement, and maintain organizational identity policies, least-privilege access frameworks, and Role-Based Access Control (RBAC) matrices.
• Conduct periodic access reviews, identity audits, and application inventory reviews to ensure alignment with security baselines and regulatory standards.
• Define and document governance requirements for cloud environments, enterprise SaaS, and specialized internal applications.

Advanced Escalations & Ticket Management

• Act as the Tier-2/Tier-3 escalation point for complex governance tickets, broken workflows, and elevated entitlement requests following initial Service Desk triage.
• Analyze recurring access issues to identify root causes and implement permanent, automated fixes.

Stakeholder Management & Project Leadership

• Serve as the central liaison between IAM Tech, business application owners, and external auditors.
• Lead small-to-medium security initiatives, driving deliverables, tracking milestones, and delivering clear status updates to leadership.

Technical Automation & Operational Efficiency

• Identify manual, repetitive governance and operational processes and develop automated solutions.
• Write clean, maintainable scripts (Python) and deploy serverless resources (AWS Lambda, Step Functions) to streamline application inventory tracking, access reporting, and audit collection.
• Partner closely with IAM Technical and DevOps teams to co-develop automated provisioning and de-provisioning workflows.