Identity and Access Management Officer

Metrobank; Metro Manila; On-site; PHP 1,000,000 - 1,800,000; Full time

Job summary

Metrobank is seeking an Identity and Access Management Officer to design and maintain user access models across bank systems, while coordinating encryption keys and privileged accounts. The role focuses on governance rather than end-user support, requiring RBAC, SoD, and JML expertise and strong stakeholder collaboration.

You will evaluate access requests, review user profiles, and implement policies ensuring least privilege across multiple layers of the bank's infrastructure.

Qualifications

• Bachelor's degree in Information Technology, Computer Science, or a related field.
• At least 3 years of IAM, information security, or IT risk experience.
• Knowledge of RBAC, SoD, JML, and access governance; strong communication skills.

Responsibilities

• Evaluates access requests for operating system, network, data center, and application systems.
• Reviews and maintains user access profiles to ensure least privilege and proper role separation.
• Performs identity management for local, network, federated, and global web trusts.
• Develops and maintains access profiles based on mandatory, discretionary, or role-based models.
• Ensures least privilege access and separation of duties across all profiles.
• Evaluates and recommends access profiles for SDLC phases.
• Formulates and reviews information security policies on access control.
• Monitors and coordinates safekeeping of privilege accounts and keys.
• Performs related tasks for updates as needed.

Skills

Communication

Stakeholder management

Analytical thinking

Attention to detail

Education

Bachelor's degree in IT/CS/IS/Cybersecurity

Tools

CyberArk

PAM

Job description

Here at Metrobank, we don't simply hire employees—we hone future leaders. We provide opportunities that enhance your skills and unlock your talents, helping you evolve into a well-rounded individual. We supply you with all the pieces you need to do your best work, unleashing your full potential to help you secure your future and lead a fulfilling career. And with Metrobank's strong heart for the community, you have the chance to give back and make worthwhile contributions to our nation's economic and social development.

With Metrobank, a meaningful life is within your reach!

Identity and Access Management Officer

Develop and maintained user access models of the various application systems of the bank. Handle the monitoring, management and coordination of the safekeeping and retrieval of all system-related encryption keys and super IDs. Formulate and recommend information security policies and procedures related to access control meet the bank’s information security objectives and ensure effective implementation

Key Responsibilities

• Evaluates requests for operating system, network data center access control system, telecommunication system and application system’s access based on predefined criteria for determining its completeness and validity.
• Reviews existing operating, network, and application systems infrastructure users to ensure authentic and valid access profiles.
• Reviews and maintains existing network, system, database, data center access control system, telecommunication system and application user access profiles (access models) to ensure defined roles are least privileged and has role separation.
• Performs identity management models for local, network, federated and global web trusts and identities.
• Develops and maintains access profiles based on mandatory, discretionary or role-based access model framework.
• Ensures least privilege access and separation of duties across all access model profiles.
• Evaluates and recommends mandatory, discretionary or role-based (e.g. structural vs. functional roles) access profiles for the different phases of the software development lifecycle.
• Formulate, recommends and reviews information security policies and procedures on access control
• Monitors, manages, coordinates and supervises the safekeeping and retrieval of privilege account and security/encryption keys.
• Performs other related functions that may be assigned from time to time for updating

Qualifications

• Bachelor's degree in Information Technology, Computer Science, Information Systems, Cybersecurity, or a related field.
• At least 3 years of experience in Identity and Access Management (IAM), Information Security, IT Risk, or related areas.
• Experience in user access administration, access governance, role design, access reviews, and privileged access management.
• Knowledge and/or hands‑on experience with CyberArk or similar Privileged Access Management (PAM) solutions is an advantage.
• Familiarity with IAM concepts such as Role-Based Access Control (RBAC), Least Privilege, Segregation of Duties (SoD), Joiner-Mover-Leaver (JML) processes, and access recertification.
• Understanding of operating systems, databases, networks, and application security concepts.
• Experience in access management governance, policy implementation, audit compliance, and security controls is preferred.
• Strong analytical and problem‑solving skills with keen attention to detail.
• Good communication and stakeholder management skills.
• This role is focused on identity, access, and security governance rather than IT helpdesk or end‑user technical support.
• Relevant certifications in IAM, CyberArk, Information Security, or Cybersecurity are an advantage.