Cyber Security Access Management Analyst

Smart Communications, Inc.; Philippines; On-site; PHP 600,000 - 1,200,000; Full time

Job summary

Smart Communications, Inc. is seeking an IAM professional to support enterprise-wide identity and access management initiatives in the Philippines. You will help enforce access controls, implement RBAC, and drive governance to ensure least privilege across the organization.

The role involves conducting periodic access reviews, supporting audits for SOX and other regulations, and collaborating with multiple business units to communicate access standards effectively.

Qualifications

• 1–2 years in IT/cybersecurity with a focus on IAM.
• Working knowledge of IGA, RBAC, SoD, and identity lifecycle management.
• Exposure to cloud IAM (AWS, Azure, GCP) and directory services.

Responsibilities

• Enforce access control policies and implement RBAC/Access Privilege Governance models.
• Run periodic access reviews and entitlement validations to maintain least privilege and SoD compliance.
• Support audits and compliance reporting (SOX 404 controls).
• Contribute to automation of provisioning/deprovisioning processes.
• Collaborate with business units to communicate access standards clearly.

Skills

IAM

RBAC

SoD

Access reviews

Provisioning

Education

Bachelor's degree in IT or CS

Tools

CyberArk

Okta

Saviynt

AD/LDAP

Azure AD

AWS IAM

Job description

Identity and access aren't just IT hygiene, they're a frontline defense. If you've spent time in the trenches of provisioning, deprovisioning, access reviews, or RBAC and want to see that work matter at enterprise scale, this is worth a closer look.

What you\'ll actually be doing: You\'ll support the enterprise-wide IAM strategy, working cross-functionally to keep access secure, compliant, and efficient. Day to day, that means:

• Enforcing access control policies and implementing RBAC and Access Privilege Governance models
• Running periodic access reviews and entitlement validations to maintain least privilege and SoD compliance
• Supporting audits and compliance reporting, including SOX 404 controls
• Contributing to the continuous improvement and automation of provisioning/deprovisioning processes
• Working directly with business units and stakeholders to keep access standards clearly communicated and consistently followed

What you bring:

• 1-2 years in IT/cybersecurity with a focus on IAM
• Working knowledge of IGA, RBAC, SoD, and identity lifecycle management
• Exposure to PAM tools (CyberArk, Okta, Saviynt), directory services (AD, Azure AD, LDAP), or cloud IAM (AWS, Azure, GCP)
• Familiarity with frameworks like NIST, ISO 27001, or SOX
• A bachelor\'s degree in IT, Computer Science, or a related field

Nice to have: CISSP, CISM, CISA, GIAC IAM certs, CIAM, or vendor certifications (SailPoint, CyberArk, Okta, Saviynt).

If you\'re the type who catches the non-compliant account before it becomes an incident, and you\'d rather build the control than just flag it, let\'s talk.