Identity & Access Governance Specialist

Metrobank; Philippines; Hybrid; PHP 800,000 - 1,200,000; Full time

Job summary

Metrobank is seeking an Identity and Access Management Officer to design, implement and oversee access control for bank systems. You will manage user identities, review access rights, and enforce least-privilege policies across OS, network, databases, and applications.

The role focuses on identity governance, not helpdesk support, and requires collaboration with security teams to uphold policy and regulatory objectives.

Qualifications

• Bachelor's degree in IT, CS, IS, Cybersecurity or related field.
• 3+ years of IAM, information security, IT risk, or related experience.
• Experience in user access administration, governance, role design, and privileged access.
• Knowledge of RBAC, SoD, JML concepts and access recertification.

Responsibilities

• Evaluate requests for OS, network, data center, access control based on predefined criteria.
• Review existing users to ensure authentic and valid access profiles.
• Maintain access profiles to ensure least privilege and separation of duties.
• Perform identity management for local, network, federated and global web trusts.
• Develop and maintain access profiles based on required access model framework.
• Ensure least privilege and separation of duties across all profiles.
• Evaluate access profiles for software development lifecycle phases.
• Monitor safekeeping and retrieval of privilege accounts and keys.
• Perform other related functions as assigned.

Skills

Analytical skills

Problem solving

Communication skills

Stakeholder management

RBAC understanding

SoD understanding

JML processes

Education

Bachelor's degree in Information Technology/CS/IS/Cybersecurity

Tools

CyberArk

Job description

Metrobank is seeking an Identity and Access Management Officer to design, implement and oversee access control for bank systems. You will manage user identities, review access rights, and enforce least-privilege policies across OS, network, databases, and applications.

The role focuses on identity governance, not helpdesk support, and requires collaboration with security teams to uphold policy and regulatory objectives.