IAM Secrets Business Analyst

Purview Services; Chandigarh; On-site; INR 400,000 - 600,000; Full time

Job summary

HSBC is seeking a Secrets Business Analyst to join the IAM PAM and Secrets Team. You will help define and uplift Secrets Management controls and reporting while coordinating with project managers, control owners, and technical specialists.

You will collaborate with business units and IT teams to gather requirements, provide updates to senior management, and contribute to a robust governance framework in a regulated environment.

Qualifications

• Knowledge & experience of Identity & Access Management (IAM) controls.
• Technical background within security spaces - credential management.
• Extensive knowledge on managing compliance IAM Security Standards.
• Able to understand Operating Effectiveness of IAM Secrets Controls, identify gaps and remediate.
• Manage & Govern KPIs / KCIs / KRIs.
• Stakeholder Management Across all Lines of Defence.
• Strong communication skills for stakeholder collaboration on procedures & best practices.
• Role relevant qualifications, i.e., CISSP/CISM desirable but not essential.
• Strong presentation and reporting skills.

Responsibilities

• Define, maintain, and uplift IAM Secrets Management control processing.
• Support IAM access management for machine-to-machine authentication controls.
• Identify, investigate, and report cybersecurity exposures; recommend corrective action.
• Record, monitor, and publish MI/KCI reporting dashboards for stakeholders.
• Lead cross-functional teams and coordinate with project managers and owners to maintain momentum.
• Ensure governance and compliance in regulated environments (GDPR, SOX, PCI DSS, ISO 27001).
• Manage risks and issues across the project lifecycle.

Skills

IAM Controls

Security credentials

IAM Security Standards

IAM Secrets Controls

Gaps & Remediation

KPIs / KCIs / KRIs

Stakeholder management

Communication skills

CISSP/CISM desirable

Presentation & reporting

Job description

Role Description:

The Secrets BA role is based within the Cyber Security Identity Access Management (IAM) PAM and Secrets Team. The Team

supports the Head of PAM and Secrets and will work on setting the direction for CO.'s Secrets Management controls and reporting framework.

Key Responsibilities

• Be responsible for defining, maintaining, and uplifting IAM Secrets Management control processing.
• Providing direct assistance and contribution to the Identity & Access Management organization of access management of HSBCs machine-to-machine authentication controls.
• Identify, investigate, and report potential Cybersecurity related exposures and recommend corrective action, maintaining SME support and/or ownership through to resolution.
• Work alongside the IDAM Control Owners to record, monitor, and publish MI / KCI reporting; dashboards; for the Cybersecurity management and other appropriate stakeholders.

Stakeholder Engagement:

• Collaborate with business units and IT teams, to gather requirements and ensure smooth project execution.
• Provide regular updates to senior management and other stakeholders.

Governance and Compliance:

• Experience of working in a regulated environment with exposure to global regulatory requirements, including GDPR, SOX, PCI DSS, and ISO 27001.
• Implement robust governance practices to manage risks and ensure compliance.

Team Coordination and Leadership:

• Lead cross-functional teams, work alongside project managers, control owners, business analysts, and technical specialists. Foster collaboration and resolve conflicts to maintain project momentum.
• Proven track record of working with technical, cybersecurity and/or operations teams.
• Lead geographically disbursed team and pull them together to achieve common objectives.
• Excellent written and verbal communications

Process Improvement:

• Continuously evaluate processes and propose enhancements to improve efficiency, scalability, and security.
• Develop and implement best practices for project delivery.

Risk and Issue Management

• Identify, assess, and mitigate risks throughout the project lifecycle.
• Proactively manage issues and dependencies to avoid project delays.

Documentation

Project initiation, planning, execution, monitoring, and closure documentation including but not limit project charter,

project plan, various status report, performance report and project closeout report.

Experience:

• Knowledge & Experience of Identity & Access Management (IAM) Controls
• Technical background within security spaces- credential arrangement
• Extensive knowledge on managing compliance IAM Security Standards
• Able to understand Operating Effectiveness of IAM Secrets Controls, Identify Gaps and Remediate
• Manage & Govern KPIs / KCIs / KRIs
• Stakeholder Management Across all Lines of Defence
• Communication Skills for stakeholder collaboration on Standard Procedures and Best Practices
• Role relevant qualifications, i.e.CISSP/CISM is desirable but not essential
• Strong presentation and reporting skills.