Identity and Access Management Officer

Metrobank; Philippines; Ibrido; PHP 800.000 - 1.200.000; Tempo pieno

Descrizione del lavoro

Metrobank is seeking an Identity and Access Management Officer to design, implement and oversee access control for bank systems. You will manage user identities, review access rights, and enforce least-privilege policies across OS, network, databases, and applications.

The role focuses on identity governance, not helpdesk support, and requires collaboration with security teams to uphold policy and regulatory objectives.

Competenze

• Bachelor's degree in IT, CS, IS, Cybersecurity or related field.
• 3+ years of IAM, information security, IT risk, or related experience.
• Experience in user access administration, governance, role design, and privileged access.
• Knowledge of RBAC, SoD, JML concepts and access recertification.

Mansioni

• Evaluate requests for OS, network, data center, access control based on predefined criteria.
• Review existing users to ensure authentic and valid access profiles.
• Maintain access profiles to ensure least privilege and separation of duties.
• Perform identity management for local, network, federated and global web trusts.
• Develop and maintain access profiles based on required access model framework.
• Ensure least privilege and separation of duties across all profiles.
• Evaluate access profiles for software development lifecycle phases.
• Monitor safekeeping and retrieval of privilege accounts and keys.
• Perform other related functions as assigned.

Conoscenze

Analytical skills

Problem solving

Communication skills

Stakeholder management

RBAC understanding

SoD understanding

JML processes

Formazione

Bachelor's degree in Information Technology/CS/IS/Cybersecurity

Strumenti

CyberArk

Descrizione del lavoro

Here at Metrobank, we don't simply hire employees—we hone future leaders. We provide opportunities that enhance your skills and unlock your talents, helping you evolve into a well-rounded individual. We supply you with all the pieces you need to do your best work, unleashing your full potential to help you secure your future and lead a fulfilling career. And with Metrobank's strong heart for the community, you have the chance to give back and make worthwhile contributions to our nation's economic and social development.

With Metrobank, a meaningful life is within your reach!

Identity and Access Management Officer Develop and maintained user access models of the various application systems of the bank. Handle the monitoring, management and coordination of the safekeeping and retrieval of all system-related encryption keys and super IDs. Formulate and recommend information security policies and procedures related to access control meet the bank's information security objectives and ensure effective implementation

Key Responsibilities

• Evaluates requests for operating system, network data center access control system, telecommunication system and application system's access based on predefined criteria for determining its completeness and validity.
• Reviews existing operating, network, and application systems infrastructure users to ensure authentic and valid access profiles.
• Reviews and maintains existing network, system, database, data center access control system, telecommunication system and application user access profiles (access models) to ensure defined roles are least privileged and has role separation.
• Performs identity management models for local, network, federated and global web trusts and identities.
• Develops and maintains access profiles based on mandatory, discretionary or role-based access model framework.
• Ensures least privilege access and separation of duties across all access model profiles.
• Evaluates and recommends mandatory, discretionary or role-based (e.g. structural vs. functional roles) access profiles for the different phases of the software development lifecycle.
• Formulate, recommends and reviews information security policies and procedures on access control
• Monitors, manages, coordinates and supervises the safekeeping and retrieval of privilege account and security/encryption keys.
• Performs other related functions that may be assigned from time to time for updating

Qualifications

• Bachelor's degree in Information Technology, Computer Science, Information Systems, Cybersecurity, or a related field.
• At least 3 years of experience in Identity and Access Management (IAM), Information Security, IT Risk, or related areas.
• Experience in user access administration, access governance, role design, access reviews, and privileged access management.
• Knowledge and/or hands-on experience with CyberArk or similar Privileged Access Management (PAM) solutions is an advantage.
• Familiarity with IAM concepts such as Role-Based Access Control (RBAC), Least Privilege, Segregation of Duties (SoD), Joiner-Mover-Leaver (JML) processes, and access recertification.
• Understanding of operating systems, databases, networks, and application security concepts.
• Experience in access management governance, policy implementation, audit compliance, and security controls is preferred.
• Strong analytical and problem-solving skills with keen attention to detail.
• Good communication and stakeholder management skills.
• This role is focused on identity, access, and security governance rather than IT helpdesk or end-user t