Lead PAM Risk Analyst

Guardian India; Chennai District; On-site; INR 2,800,000 - 4,200,000; Full time

Job summary

Guardian India in Chennai/Gurgaon is seeking a Lead PAM Risk Analyst to strengthen enterprise privileged access governance, risk management, compliance, and access controls. The role identifies and mitigates privileged-access risks, leads access reviews and remediation, supports audits, and partners with security teams to improve the organization’s security posture.

Required qualifications include a bachelor’s in IT/cybersecurity and 6+ years in IAM/PAM or audit, with strong knowledge of SoD,

Qualifications

• Bachelor’s degree in Information Technology, Cybersecurity, or a related field.
• At least 6 years of experience in IAM, PAM, IT risk, information security, or audit.
• Strong understanding of privileged access management, access governance, and security controls.
• Experience supporting SOX, SOC, NIST, ISO 27001, or comparable compliance frameworks.
• Strong analytical, risk-assessment, and stakeholder-management skills.
• Preferred: CyberArk, SailPoint, Microsoft Entra ID familiarity; identity governance and SoD knowledge; relevant security/audit certifications.

Responsibilities

• Governance and Risk: Conduct privileged access reviews and entitlement assessments across critical systems.
• Identify, analyze, and drive remediation of risks involving privileged accounts, service accounts, and elevated access.
• Review exceptions, policy violations, and privileged access requests to confirm controls are in place.
• Monitor compliance with PAM policies, standards, and regulatory requirements.
• Audit and Compliance: Support internal and external audits by providing evidence, reports, and risk assessments.
• Analyze access-related findings and coordinate remediation with relevant teams.
• Maintain process documentation and procedural standards.
• Reporting and Collaboration: Develop risk metrics, dashboards, and executive reporting for PAM programs.
• Partner with IAM, Infrastructure, Security Ops, and Applications teams to strengthen access governance.

Skills

Privileged access management

Access governance

Security controls

Risk analysis

Stakeholder management

SOX compliance

SOC compliance

NIST compliance

ISO 27001

Compliance frameworks

Identity governance

Access certification

Segregation of duties

IAM

Security reporting

CyberArk

SailPoint

Microsoft Entra ID

CISA

Security+

CISSP

CRISC

Education

Bachelor’s degree in Information Technology, Cybersecurity, or related field

Tools

CyberArk

SailPoint

Microsoft Entra ID

Job description

Requirements Elicitation, Understanding, Analysis, & Management

Understand the project's Vision and requirements, and contribute to the creation of the supplemental requirements, building the low-level technical specifications for a particular platform and/or service solution.

Project Planning, Tracking, & Reporting

Estimate the tasks and resources required to design, create (build), and test the code for assigned module(s).

Provide inputs in creating the detailed schedule for the project.

Support the team in project planning activities, in evaluating risks, and shuffle priorities based on unresolved issues.

During development and testing, ensure that assigned parts of the project/modules are on track with respect to schedules and quality.

Note scope changes within the assigned modules and work with the team to shuffle priorities accordingly.

Communicate regularly with the team about development changes, scheduling, and status.

Participate in project review meetings.

Tracking and reporting progress for assigned modules

Design:

Create a detailed (LLD) design for the assigned piece(s) with possible alternate solutions.

Ensure that LLD design meets business requirements.

Submit the LLD design for review.

Fix the detailed (LLD) design for the assigned piece(s) for the comments received from team.

Development & Support

Build the code of high-priority and complex systems according to the functional specifications, detailed design, maintainability, and coding and efficiency standards.

Use code management processes and tools to avoid versioning problems.

Ensure that the code does not affect the functioning of any external or internal systems.

Perform peer reviews of code to ensure it meets coding and efficiency standards.

Act as the primary reviewer to review the application code created by software engineers to ensure compliance to defined standards. Recommend changes to the code as required.

Testing & Debugging

Attend the Test Design walkthroughs to help verify that the plans and conditions will test all functions and features effectively.

Perform impact analysis for issues assigned to self and software engineers.

Actively assist with project- and code-level problem solving, such as suggesting paths to explore when testing engineers or software engineers encounter a debugging problem, and escalate urgent issues.

Documentation

Review technical documentation for the code for accuracy, completeness, and usability.

Document and maintain the reviews conducted and the unit test results.

Process Management

Adhere to the project and support processes.

Adhere to best practices and comply with approved policies, procedures, and methodologies, such as the SDLC cycle for different project sizes.

Shows responsibility for corporate funds, materials and resources.

Ensure adherence to SDLC and audits requirements.

Adhere to best practices and comply with approved policies, procedures, and methodologies.

Position Summary

We are seeking a Lead PAM Risk Analyst to strengthen enterprise privileged access governance, risk management, compliance, and access controls. The role will identify and mitigate privileged-access risks, lead access reviews and remediation, support audits, and partner with technology and security teams to improve the organization’s security posture.

Key Responsibilities

• Governance and Risk
  • Conduct privileged access reviews and entitlement assessments across critical systems.
  • Identify, analyze, and drive remediation of risks involving privileged accounts, service accounts, and elevated access.
  • Review exceptions, policy violations, and privileged access requests to confirm that appropriate controls are in place.
  • Monitor compliance with PAM policies, standards, and regulatory requirements.
• Audit and Compliance
  • Support internal and external audits by providing evidence, reports, and risk assessments.
  • Analyze access-related findings and coordinate remediation with application, infrastructure, and security teams.
  • Maintain process documentation, control procedures, and operational standards.
• Reporting and Collaboration
  • Develop risk metrics, dashboards, and executive reporting for PAM governance programs.
  • Partner with IAM, Infrastructure, Security Operations, and Application teams to strengthen access governance and reduce risk.

Required Qualifications

• Bachelor’s degree in Information Technology, Cybersecurity, or a related field.
• At least 6 years of experience in IAM, PAM, IT risk, information security, or audit.
• Strong understanding of privileged access management, access governance, and security controls.
• Experience supporting SOX, SOC, NIST, ISO 27001, or comparable compliance frameworks.
• Strong analytical, risk-assessment, and stakeholder-management skills.

Preferred Qualifications

• Experience with CyberArk, SailPoint, Microsoft Entra ID, or comparable IAM and PAM platforms.
• Knowledge of identity governance, access certification, segregation of duties (SoD), and access lifecycle management.
• Relevant security, IAM, risk, or audit certification, such as CISA, Security+, CyberArk, CISSP, or CRISC.

Key Skills

PAM governance • Access reviews • Risk and compliance • Identity governance • Audit support • SOX controls • Access certification • Segregation of duties (SoD) • IAM • Security reporting

Success Measures

• Reduced privileged-access risks and audit findings.
• Timely completion of access certifications and remediation actions.
• Successful audit outcomes and sustained compliance.
• Improved governance, reporting, and risk visibility across privileged-access environments.

Location: This position can be based in any of the following locations:

Chennai, Gurgaon

For internal use only:

R000109976