Senior IAM & Access Governance Officer

Hammerjack Pty Ltd; Philippines; On-site; PHP 600,000 - 900,000; Full time

Job summary

Metrobank is seeking an Identity and Access Management Officer to design and maintain user access models across bank applications, monitor privilege keys, and ensure least privilege. The role focuses on identity, access and security governance rather than end-user support, with collaboration across IT and security teams.

The candidate will develop access profiles, implement policy controls, and contribute to audit readiness, risk reduction, and compliance with security frameworks.

Qualifications

• Bachelor's degree or higher in Information Technology, Computer Science, Information Systems, Cybersecurity, or related field.
• At least 3 years of experience in Identity and Access Management (IAM), Information Security, IT Risk, or related areas.
• Experience in user access administration, access governance, role design, access reviews, and privileged access management.
• Knowledge and/or hands-on experience with CyberArk or similar Privileged Access Management (PAM) solutions is an advantage.
• Familiarity with IAM concepts such as RBAC, Least Privilege, Segregation of Duties (SoD), Joiner-Mover-Leaver (JML) processes, and access recertification.
• Understanding of operating systems, databases, networks, and application security concepts.
• Experience in access management governance, policy implementation, audit compliance, and security controls is preferred.
• Strong analytical and problem-solving skills with keen attention to detail.
• Good communication and stakeholder management skills.
• This role is focused on identity, access, and security governance rather than IT helpdesk or end-user technical support.
• Relevant certifications in IAM, CyberArk, Information Security, or Cybersecurity are an advantage.

Responsibilities

• Evaluates requests for operating system, network data center access control system, telecommunication system and application system's access based on predefined criteria for determining its completeness and validity.
• Reviews existing operating, network, and application systems infrastructure users to ensure authentic and valid access profiles.
• Reviews and maintains existing network, system, database, data center access control system, telecommunication system and application user access profiles (access models) to ensure defined roles are least privileged and has role separation.
• Performs identity management models for local, network, federated and global web trusts and identities.
• Develops and maintains access profiles based on mandatory, discretionary or role-based access model framework.
• Ensures least privilege access and separation of duties across all access model profiles.
• Evaluates and recommends mandatory, discretionary or role-based (e.g. structural vs. functional roles) access profiles for the different phases of the software development lifecycle.
• Formulate, recommends and reviews information security policies and procedures on access control
• Monitors, manages, coordinates and supervises the safekeeping and retrieval of privilege account and security/encryption keys.
• Performs other related functions that may be assigned from time to time for updating

Skills

IAM concepts

Access governance

RBAC design

Stakeholder management

Analytical thinking

Communication skills

Education

Bachelor's degree in IT or related field

Tools

CyberArk PAM

Job description

Metrobank is seeking an Identity and Access Management Officer to design and maintain user access models across bank applications, monitor privilege keys, and ensure least privilege. The role focuses on identity, access and security governance rather than end-user support, with collaboration across IT and security teams.

The candidate will develop access profiles, implement policy controls, and contribute to audit readiness, risk reduction, and compliance with security frameworks.