Customers & External Identities Senior Expert

stc; Riyadh; On-site; SAR 180,000 - 240,000; Full time

Job summary

stc is seeking a senior identity and access management professional to extend and govern identity solutions for Group third party HRMS and customer apps. You will implement least-privilege access, ML-based user behavior analytics, and robust authentication mechanisms across Telco/Network systems.

The role requires strong background in security governance, risk management, and identity verification for offshore third party users, aligned with CS policies and HR processes.

Qualifications

• 7+ years of relevant experience with 3–4 years in a similar role.
• Prior experience in technology security and systems risk management, preferably in telecom/tech.
• Certifications in technology security (CISSP, CAP, SSCP, (ISC)2, CCFP, CISM, etc.).
• Disaster Recovery/Business Continuity knowledge (BCM, CBCP, DRCS, DRii).
• ITSM/ITIL knowledge preferred.

Responsibilities

• Extend stc identity management tools with Group third party HRMS.
• Manage third party users' identity lifecycle with least-privilege access across IT apps and networks.
• Enable IAM machine learning and user behavior analytics to reduce identity risks.
• Develop risk-based authentication mechanisms based on user risk scores.
• Audit third party lifecycle processes and flag access misuse with stakeholders.
• Govern and design IAM processes for Group third party users accessing stc systems.
• Lead identity verification technology design for third party offshore users.
• Enable monitoring with Cyber Defense Center threat use cases.
• Design Customer Identity & Access Management for Group Apps (stc Play, stc TV, Mystc portal).
• Maintain IAM infrastructure with updates and patches.
• Establish 24/7 monitoring of customer identity management.

Skills

Analytical skills

Organizational skills

Decision making

Education

Bachelor’s in Computer Science or IT

Master’s in MBA or Cyber Security

Tools

CISSP/CISM/SSCP

Job description

Job Purpose

The role holder is responsible for Extending stc identity management tools with Group third party HRMS and Enable Group third party users identity and access monitoring. The role holder shall carry out his duties in accordance with the stipulated business policies and procedure

Job Purpose

The role holder is responsible for Extending stc identity management tools with Group third party HRMS and Enable Group third party users identity and access monitoring. The role holder shall carry out his duties in accordance with the stipulated business policies and procedure

Job Responsibility

• Ensure extending stc identity management tools with Group third party HRMS.


• Manage Group third party users identity lifecycle technology with best use practices in according to NCA and stc regulations and standards which include role based access, to ensure enforcing least privilege concept for stc IT applications, Telco/Network systems.


• Enable IAM machine learning and user behavior analytics, to help reducing the risk of Group third party identities.


• Develop risk based authentication mechanism, based on user defined risk score.


• Conduct Audit third party users lifecycle management processes and appropriate risks flagging access misuse, process violation with relevant concerned stakeholders.


• Govern the implementation of identity & access management within stc, for Group third party users who are accessing stc systems in alignment with CS Governance policy & standards.


• Lead the Design of identity and access management supporting processes, procedures for Group third users who are accessing stc systems, in alignment with CS Governance policy & standards.


• Lead the Design of identity verification technology for third party off-shore users, in alignment with HR and IT processes and technologies.

Job Responsibility (cont.)

• Enable Group third party users identity and access monitoring, by creating appropriate threat use cases with Cyber Defense Center.


• Lead the Design of Customer Identity & Access Management technology for Group Apps such as (stc Play, stc TV, and Mystc portal).


• Maintain and operate Customer Identity & Access Management technology and support its infrastructure updated with latest patches and system upgrades.


• Establish 24/7 performance monitoring of customer identity management technology.


• Enable customer identity and access management to securely empower digital access experience from registration to logging and user management, in alignment with all relevant stakeholders.


• Ensure understanding customer behavior and enhance IAM user experience through following design-thinking approach, in alignment with business units.


• Enable IAM machine learning and user behavior analytics, to help reducing the risk of Customer identity risks.


• Maintain Customer Access Management Monitoring and user activity logs.


• Ensure providing secured APIs infrastructure for customer identity management integrations with business Apps


• Enable customer identity and access management to securely empower digital access experience from registration to logging and user management, in alignment with all relevant stakeholders.


• Ensure staying up-to-date of DIM & AC management solutions industry trends and developments, and implement upgrades, changes or enhancements to comply with developed cybersecurity policies and meet business’ needs

Years Of Experience

A minimum of 7 years of relevant experience with at least 3 - 4 years of experience in a similar role

Nature Of Experience

Prior experience in Technology Systems Security in a Systems Risk Management roles, preferably in the technology / telecommunication industry.

Job Band

"SME"

Skills

• Intermediate analytical and organizational skills


• Intermediate planning and organizing skills


• Intermediate decision making and problem solving skills

Education

Bachelor Degree in Computer Science or Information Technology

Masters Degree in Business Administration or Cyber Security

Certifications

• Relevant certification in technology Security (CISSP, CAP, SSCP, (ISC) 2, CCFP, CISM etc.)


• Relevant certification in technology Disaster Recovery, Business Continuity (BCM, CBCP, DRCS, DRii etc.)


• Relevant certification in Information Technology Service or Infrastructure Management (ITSM/ITIL) is preferred