IAM & Risk Governance Analyst

Admiral Europe Tech | Admiral Group; Sevilla; Presencial; EUR 65.000 - 90.000; Jornada completa

Descripción de la vacante

Admiral Europe Tech is seeking an IAM Governance Analyst to bridge security engineering with business operations. You will design identity policies, run access reviews, and document governance for cloud environments and internal apps. A strong automation mindset will be used to reduce manual work across IAM processes.

You will automate workflows with Python and AWS serverless services, while coordinating with IAM Tech, DevOps, and auditors to deliver secure, compliant outcomes.

Formación

• Strong IAM concepts including RBAC/ABAC and least privilege.
• Excellent written and spoken English with ability to translate technical requirements to business policy.
• Proven track record managing cross-functional technical projects and inventories.
• Practical experience writing scripts to automate tasks.
• Familiarity with cloud platforms (AWS preferred, Azure/GCP exposure).

Responsabilidades

• Design and maintain identity policies, RBAC matrices, and least privilege frameworks.
• Conduct access reviews and identity audits to align with security baselines.
• Document governance requirements for cloud environments and internal apps.
• Serve as escalation point for governance tickets and automate fixes.
• Lead security initiatives, track milestones, and report status to leadership.

Conocimientos

IAM concepts

Security & risk

Communication

Project management

Automation & scripting

Herramientas

Python

AWS Lambda

AWS Step Functions

AWS CloudWatch

REST APIs

Descripción del empleo

We are seeking an IAM Governance Analyst who combines strong risk and compliance expertise with a modern, automation-first mindset. In this role, you will bridge the gap between technical security engineering and business operations, ensuring our cloud infrastructure and specialized applications remain secure, compliant, and well-documented. While the primary focus is on IAM Governance, Risk, and Compliance (GRC), we are actively looking for a professional who also leverages technical skills (Python, AWS Lambdas) to automate manual workflows, build control efficiencies, and support our IAM Tech teams with a governance approach.

Key Responsibilities:

• Design, implement, and maintain organizational identity policies, least-privilege access frameworks, and Role-Based Access Control (RBAC) matrices.
• Conduct periodic access reviews, identity audits, and application inventory reviews to ensure alignment with security baselines and regulatory standards.
• Define and document governance requirements for cloud environments, enterprise SaaS, and specialized internal applications.

Advanced Escalations & Ticket Management

• Act as the Tier-2/Tier-3 escalation point for complex governance tickets, broken workflows, and elevated entitlement requests following initial Service Desk triage.
• Analyze recurring access issues to identify root causes and implement permanent, automated fixes.

Stakeholder Management & Project Leadership

• Serve as the central liaison between IAM Tech, business application owners, and external auditors.
• Lead small-to-medium security initiatives, driving deliverables, tracking milestones, and delivering clear status updates to leadership.

Technical Automation & Operational Efficiency

• Identify manual, repetitive governance and operational processes and develop automated solutions.
• Write clean, maintainable scripts (Python) and deploy serverless resources (AWS Lambda, Step Functions) to streamline application inventory tracking, access reporting, and audit collection.
• Partner closely with IAM Technical and DevOps teams to co-develop automated provisioning and de-provisioning workflows.

Requirements:

• IAM & Security Core: Strong understanding of foundational IAM concepts, including RBAC/ABAC, Principle of Least Privilege, Single Sign-On (SSO), Multi-Factor Authentication (MFA), and Identity Lifecycle Management.
• Communication: Exceptional written and verbal English skills, with a proven ability to translate complex technical requirements into actionable business policies and clear documentation.
• Project & Task Management: Demonstrated track record of managing cross-functional technical projects, tracking application inventories, and meeting delivery schedules independently.
• Automation & Scripting: Practical experience writing scripts in Python (or JavaScript) to interact with REST APIs, parse data, and automate operational tasks.
• Cloud Infrastructure: Technical familiarity with cloud platforms—specifically AWS (experience with AWS Lambda, Step Functions, IAM, and CloudWatch is highly desirable)—along with exposure to Azure or GCP.