MetLife Hiring For Team Leader – Technology Services at Noida

MetLife; Dadri; On-site; INR 4,50,000 - 6,75,000; Full time

Job summary

An established industry player is seeking a Team Leader for Technology Services to oversee User Access Certification processes. This pivotal role involves managing access compliance, participating in audits, and ensuring that user entitlements align with security protocols. The ideal candidate will have a strong background in IT Risk and Security, with proven experience in user entitlement certifications. You will collaborate with internal stakeholders and external security teams to enhance governance practices and drive continuous improvements. If you are a proactive leader with a passion for security and compliance, this is an exciting opportunity to make a significant impact in a dynamic environment.

Qualifications

• 3+ years of experience in IT Risk & Security Audit & Compliance.
• Hands-on experience in User Entitlement Certifications.
• Knowledge of IT Risk and Security.

Responsibilities

• Gather information to create security profiles for applications.
• Conduct meetings for Global Governance Review.
• Prepare certification workbook and manage user certification decisions.

Skills

IT Risk & Security Audit

User Entitlement Certifications

Problem Solving

Analytical Skills

Planning Skills

Intermediate MS Office

Education

IT Graduate

Tools

Active Directory Console

Quest

Enterprise SharePoint

IT Archer Findings

Job description

Team Leader – Technology Services

Position Summary

The team performs the MetLife’s User Access Certification by running campaigns as per the certification cycle due on Access Central tool. Compliant to IT Risk and Security by providing access to users limited to their job profile. Participate in SOX/ SAS 70 audits for artifacts validation and clearance. Manage and answer emails received in the mailbox related to all Governance activities run under IAM and Access Central Tool navigation.

• Testing of users and entitlements across all the applications used in MetLife
• Participate in SOX/ SSAE18/ SOC2 audits for artifacts validation and clearance
• Segregate users of these applications into various risk categories
• Certify their access for appropriateness for Audit
• Create Segregation of Duties (SOD) Matrix for each application
• Deleting users with inappropriate access from the application
• Performing check on all the terminated users and their access to various applications
• Perform testing across all platforms/ infrastructures and for Brighthouse and DXC users

Job Responsibilities

1. Responsible for gathering correct information from application owner / contact to create security profile for the application used in MetLife
2. Conducting meetings to achieve the requirement for Global Governance Review
3. Prepare and upload the certification workbook on Access Central and send email to certifying managers for user certification decisions (Keep / Delete)
4. Creation of Segregation of Duties (SOD) matrix post receiving certification decisions from certifying managers
5. Identification of system, functional and duplicate accounts in the application and perform certification campaign for their certification
6. Timely follow up with the certifying managers to provide certification decision in time to avoid revocation of access
7. Prepare and share Evidence Summary File with the application owner and seek approval if deemed appropriate before the campaign ends
8. Open and keep track of archer finding for greater than read access users in the application

Knowledge, Skills and Abilities

Education

• IT Graduate
• IT Risk and Security knowledge
• MS Office

Experience

• 3 years of Experience of IT Risk & Security Audit & Compliance
• Hands-on work experience in User Entitlement Certifications
• Must possess problem solving, planning, and analytical skills to drive continuous improvements

Knowledge and skills (general and technical)

• Thorough knowledge of User Entitlement and Certifications
• Exposure to IT Archer Findings
• Exposure to Active Directory Console and Quest
• Exposure to enterprise SharePoint
• Intermediate MS Office skills

Other Requirements

• Certified Identity Management Professional (CIMP) preferred
• Cloud Identity and Access Manager (CIAM) Certification desirable

Working Relationships

Internal Contacts (and purpose of relationship):

• All Internal GOSC Stake Holders

External Contacts (and purpose of relationship) – If Applicable:

• Stateside Client/ Engineers from different regional Security teams (Such as Country/Regional Head for Monitoring/Containment)