Identity and Access Management Officer

Hammerjack Pty Ltd; Philippines; On-site; PHP 600,000 - 900,000; Full time

Job summary

Metrobank is seeking an Identity and Access Management Officer to design and maintain user access models across bank applications, monitor privilege keys, and ensure least privilege. The role focuses on identity, access and security governance rather than end-user support, with collaboration across IT and security teams.

The candidate will develop access profiles, implement policy controls, and contribute to audit readiness, risk reduction, and compliance with security frameworks.

Qualifications

• Bachelor's degree or higher in Information Technology, Computer Science, Information Systems, Cybersecurity, or related field.
• At least 3 years of experience in Identity and Access Management (IAM), Information Security, IT Risk, or related areas.
• Experience in user access administration, access governance, role design, access reviews, and privileged access management.
• Knowledge and/or hands-on experience with CyberArk or similar Privileged Access Management (PAM) solutions is an advantage.
• Familiarity with IAM concepts such as RBAC, Least Privilege, Segregation of Duties (SoD), Joiner-Mover-Leaver (JML) processes, and access recertification.
• Understanding of operating systems, databases, networks, and application security concepts.
• Experience in access management governance, policy implementation, audit compliance, and security controls is preferred.
• Strong analytical and problem-solving skills with keen attention to detail.
• Good communication and stakeholder management skills.
• This role is focused on identity, access, and security governance rather than IT helpdesk or end-user technical support.
• Relevant certifications in IAM, CyberArk, Information Security, or Cybersecurity are an advantage.

Responsibilities

• Evaluates requests for operating system, network data center access control system, telecommunication system and application system's access based on predefined criteria for determining its completeness and validity.
• Reviews existing operating, network, and application systems infrastructure users to ensure authentic and valid access profiles.
• Reviews and maintains existing network, system, database, data center access control system, telecommunication system and application user access profiles (access models) to ensure defined roles are least privileged and has role separation.
• Performs identity management models for local, network, federated and global web trusts and identities.
• Develops and maintains access profiles based on mandatory, discretionary or role-based access model framework.
• Ensures least privilege access and separation of duties across all access model profiles.
• Evaluates and recommends mandatory, discretionary or role-based (e.g. structural vs. functional roles) access profiles for the different phases of the software development lifecycle.
• Formulate, recommends and reviews information security policies and procedures on access control
• Monitors, manages, coordinates and supervises the safekeeping and retrieval of privilege account and security/encryption keys.
• Performs other related functions that may be assigned from time to time for updating

Skills

IAM concepts

Access governance

RBAC design

Stakeholder management

Analytical thinking

Communication skills

Education

Bachelor's degree in IT or related field

Tools

CyberArk PAM

Job description

Be #InGoodHands with Metrobank!

Here at Metrobank, we don't simply hire employees—we hone future leaders. We provide opportunities that enhance your skills and unlock your talents, helping you evolve into a well-rounded individual. We supply you with all the pieces you need to do your best work, unleashing your full potential to help you secure your future and lead a fulfilling career. And with Metrobank's strong heart for the community, you have the chance to give back and make worthwhile contributions to our nation's economic and social development.

With Metrobank, a meaningful life is within your reach!

Identity and Access Management Officer

Develop and maintained user access models of the various application systems of the bank. Handle the monitoring, management and coordination of the safekeeping and retrieval of all system-related encryption keys and super IDs. Formulate and recommend information security policies and procedures related to access control meet the bank's information security objectives and ensure effective implementation

Key Responsibilities

• Evaluates requests for operating system, network data center access control system, telecommunication system and application system's access based on predefined criteria for determining its completeness and validity.
• Reviews existing operating, network, and application systems infrastructure users to ensure authentic and valid access profiles.
• Reviews and maintains existing network, system, database, data center access control system, telecommunication system and application user access profiles (access models) to ensure defined roles are least privileged and has role separation.
• Performs identity management models for local, network, federated and global web trusts and identities.
• Develops and maintains access profiles based on mandatory, discretionary or role-based access model framework.
• Ensures least privilege access and separation of duties across all access model profiles.
• Evaluates and recommends mandatory, discretionary or role-based (e.g. structural vs. functional roles) access profiles for the different phases of the software development lifecycle.
• Formulate, recommends and reviews information security policies and procedures on access control
• Monitors, manages, coordinates and supervises the safekeeping and retrieval of privilege account and security/encryption keys.
• Performs other related functions that may be assigned from time to time for updating

Qualifications

• Bachelor's degree in Information Technology, Computer Science, Information Systems, Cybersecurity, or a related field.
• At least 3 years of experience in Identity and Access Management (IAM), Information Security, IT Risk, or related areas.
• Experience in user access administration, access governance, role design, access reviews, and privileged access management.
• Knowledge and/or hands-on experience with CyberArk or similar Privileged Access Management (PAM) solutions is an advantage.
• Familiarity with IAM concepts such as Role-Based Access Control (RBAC), Least Privilege, Segregation of Duties (SoD), Joiner-Mover-Leaver (JML) processes, and access recertification.
• Understanding of operating systems, databases, networks, and application security concepts.
• Experience in access management governance, policy implementation, audit compliance, and security controls is preferred.
• Strong analytical and problem-solving skills with keen attention to detail.
• Good communication and stakeholder management skills.
• This role is focused on identity, access, and security governance rather than IT helpdesk or end-user technical support.
• Relevant certifications in IAM, CyberArk, Information Security, or Cybersecurity are an advantage.