IAM Consultant

Xcede; Porto; Presencial; EUR 52 000 - 70 000; Tempo integral

Resumo da oferta

Xcede is seeking an IAM Consultant in Porto, Portugal for a 12-month contract. The role focuses on governing identity, access reviews and entitlement management, with emphasis on Conditional Access and Entra ID.

You will work with security, business and IT stakeholders to drive decisions to closure and ensure documented, auditable controls. Responsibilities include leading policy rationalisation, running workshops, and producing runbooks, operating models and evidence for audits.

Qualificações

• Strong experience in identity governance, access reviews and entitlement management.
• Proven ability to run stakeholder workshops and drive decisions to closure.
• Excellent written English and documentation discipline.

Responsabilidades

• Lead discovery and baselining of Conditional Access policies and security groups.
• Analyse group usage, membership, nesting and policy dependencies to support rationalisation decisions.
• Facilitate workshops with business, application and security stakeholders to confirm purpose and ownership.
• Maintain the rationalisation decision log and disposition for each group and policy.
• Define the management control catalogue with control statements, owners and evidence requirements.
• Design lifecycle processes covering create, modify, review and retire, including change control.
• Define access-review and attestation cadence, reviewer model and escalation handling.
• Produce the owner register, operating model, runbooks and standard operating procedures.
• Coordinate documentation reviews and manage version control in the agreed repository.
• Track RAID items, dependencies and assumptions, and support governance reporting.

Conhecimentos

Identity governance

Access reviews

Entitlement management

Stakeholder workshops

Executive communication

Ferramentas

Microsoft Entra ID

Descrição da oferta de emprego

We are supporting our client in their search for IAM Consultant. The role will be a 12-Month contract that should extend onwards.

• Lead discovery and baselining of existing Conditional Access policies and security groups.
• Analyse group usage, membership, nesting and policy dependencies to support rationalisation decisions.
• Facilitate workshops with business, application and security stakeholders to confirm purpose and ownership.
• Maintain the rationalisation decision log and disposition for each group and policy.
• Define the management control catalogue with control statements, owners and evidence requirements.
• Design lifecycle processes covering create, modify, review and retire, including change control.
• Define access-review and attestation cadence, reviewer model and escalation handling.
• Produce the owner register, operating model, runbooks and standard operating procedures.
• Coordinate documentation reviews and manage version control in the agreed Euronext repository.
• Track RAID items, dependencies and assumptions, and support governance reporting.

Key Skills:

• Strong experience in identity governance, access reviews and entitlement management.
• Working knowledge of Microsoft Entra ID, security groups and Conditional Access concepts.
• Proven ability to run stakeholder workshops and drive decisions to closure.
• Experience producing operating models, runbooks and control documentation to audit standard.
• Strong analytical skills with the ability to interpret access and sign-in data.
• Excellent written English and documentation discipline.
• Excellent stakeholder management and executive communication skills.