Security Analyst III - Identity & Access Management (Authorisation & Access Automation)

Tesco UK; Digswell; On-site; GBP 65,000 - 90,000; Full time

Job summary

Tesco is seeking an IAM Security Specialist to work across Security, Product, Engineering, Operations and Programme Functions to deliver security outcomes.

You will act as a trusted advisor, mentor others and lead remediation strategies, collaborating across teams to implement large-scale IAM improvements.

A strong background in Identity Governance, Protection and Privileged Access, plus experience with BI tools and data analysis, is required.

Qualifications

• Significant IAM experience across Governance, Protection, and PAM.
• Strong ability to lead remediation and advocate security changes.
• Experience with large-scale data analysis and security policy development.
• Security qualifications such as CompTIA or SANS/GIAC.
• Willingness to collaborate across teams and mentor others.

Responsibilities

• Act as trusted advisor for Security, IAM and wider tech teams.
• Lead remediation strategies and implement improvements at scale.
• Author and contribute to IAM security policies and standards.
• Provide technical coaching and guidance.
• Work with vendors and other security groups.

Skills

IAM knowledge

Security analytics

Cross-functional collaboration

Data manipulation

BI software

Vendors management

Tools

BI software

Identity governance tools

Privileged Access Management tooling

Job description

You work across the Security, Product, Engineering, Operations and Programme Functions that deliver the work of the Cyber Security and IAM teams.

You act as a trusted advisor and guide for colleagues across wider technology teams and the business.

You maintain productive relationships with our current vendors, potential vendors and other security groups outside of Tesco.

You are responsible for both continually improving the insight in your area of specialism and working across teams to step change approaches and tooling as required to achieve security outcomes. Communication of issues and the ability to lead alongside others to plan and execute large-scale/complex remediation approaches are central to this role. You are the ultimate escalation point for other Security Analysts seeking help with handling complex and novel operational issues, acting as a subject matter expert and offering technical coaching and advice. Building an attitude of innovation and curiosity in others around you is key to this role.

Using your extensive IAM knowledge and experience, and your broader security knowledge, you apply this to both existing and novel issues. You continually seek to improve your knowledge, both theoretical and applied, in IAM and beyond.

You are able to author and contribute to Security Policies and Technical Standards within IAM and continually seek to improve our policies in line with emerging thinking and observed scenarios within our business.

You seek to develop our technical standards and supporting documentation to aid Technology team members to improve our security posture over time.

You work cross-functionally to identity and deliver opportunities for improvement; obtaining, analysing and presenting data and insight to stakeholders across multiple teams to gain agreement. You work with others to generate remediation and improvement strategies of company-wide scale and to establish plans to execute these improvements. You lead implementation of improvements alongside others and act as a technical consult throughout, working through technical challenges as needed.

You act as the ultimate escalation point for IAM related opportunities and problems across all teams and demonstrate your responsiveness for important issues, working collaboratively with other teams as needed. You are recognized as a subject matter expert in IAM and mentor others in the domain, while asking challenging questions to help grow experience and understanding. You are a good communicator, able to explain complex concepts both within the team and across other parts of the business.

You are comfortable working with large-scale datasets and data manipulation/business intelligence software, and have a proven ability to work to identify issues and improvements, while able to switch to working as part of a wider group where needed.

We'd expect that you have significant experience working in IAM and are knowledgeable across many areas including Identity Governance & Administration, Identity Protection, Privileged Access Management, Authentication and Authorisation Protocols, as well as good experience understanding access configuration of key infrastructure.

You’ll likely have a number of security qualifications from organisations such as CompTIA or SANS/GIAC as well as other technical qualifications.

We do welcome colleagues with diverse experience who can bring unique perspectives to any discussion.

Our vision at Tesco is to become every customer's favourite way to shop, whether they are at home or out on the move. Our core purpose is ‘Serving our customers, communities and planet a little better every day’. Serving means more than a transactional relationship with our customers. It means acting as a responsible and sustainable business for all stakeholders, for the communities we are part of and for the planet.

We are proud to have an inclusive culture at Tesco where everyone truly feels able to be themselves. At Tesco, we not only celebrate diversity, but recognise the value and opportunity it brings. We're committed to creating a workplace where differences are valued, and make sure that all colleagues are given the same opportunities. We’re proud to have been accredited Disability Confident Leader and we’re committed to providing a fully inclusive and accessible recruitment process. For further information on the accessibility support we can offer, please click here.

We’re a big business and we can offer a range of diverse full-time & part-time working patterns across our many business areas, which means that we can find something that works for you. We work in a more blended pattern - combining office and remote working. Our offices will continue to be where we connect, collaborate and innovate. If you are applying internally, please speak to the Hiring Manager about how this can work for you - Everyone is welcome at Tesco.