Security Support Analyst – Privileged Access Management

CO_MGSAL Apex Fund Services South Africa Ltd; Cape Town; On-site; ZAR 600,000 - 900,000; Full time

Job summary

Apex Group is seeking a Privileged Access Management Analyst to safeguard privileged access across on-premises and cloud environments. You will own CyberArk operations, onboarding, and governance, collaborating with Security, Risk, Audit and IAM teams to ensure compliant, low-risk access across the organisation.

The role emphasizes automation, audit readiness, and continuous improvement of PAM capabilities within a global financial services context.

Qualifications

• Experience in Privileged Access Management (PAM)
• Strong knowledge of CyberArk PAM solutions (PVWA, CPM, PSM)
• Experience delivering end-to-end onboarding of apps/infrastructure to CyberArk
• Understanding of least privilege and Zero Trust models
• Excellent stakeholder engagement and communication skills

Responsibilities

• Administer and support CyberArk PAM platform (PVWA, CPM, PSM, Safes, Platforms, SCA, EPM)
• Lead onboarding for applications, cloud services and privileged accounts
• Configure password rotation, session management, and credential retrieval
• Collaborate with Security, IT and Audit teams to ensure compliance and risk reduction

Skills

PAM

IAM

CyberArk

Zero Trust

Stakeholder mgmt

Automation

Education

Bachelor's in IT/InfoSec

Tools

PVWA

CPM

PSM

Safes

Platforms

SCA

EPM

Job description

The Apex Group was established in Bermuda in 2003 and is now one of the world’s largest fund administration and middle office solutions providers. Our business is unique in its ability to reach globally, service locally and provide cross-jurisdictional services. With our clients at the heart of everything we do, our hard-working team has successfully delivered on an unprecedented growth and transformation journey, and we are now represented by over circa 13,000 employees across 112 offices worldwide.Your career with us should reflect your energy and passion. That’s why, at Apex Group, we will do more than simply ‘empower’ you. We will work to supercharge your unique skills and experience. Take the lead and we’ll give you the support you need to be at the top of your game. And we offer you the freedom to be a positive disrupter and turn big ideas into bold, industry-changing realities. For our business, for clients, and for you

The Role As a Privileged Access Management Analyst

you will play a critical role in safeguarding Apex's privileged access landscape by owning and delivering end-to-end Privileged Access Management (PAM) services. This includes managing and supporting the CyberArk platform, driving the onboarding of applications, infrastructure, cloud platforms, and privileged accounts, and ensuring privileged access controls remain secure, compliant, and operationally effective. You will serve as a trusted advisor to Business Units, Application Owners, Infrastructure and Cloud Engineering teams, helping them adopt PAM controls that reduce risk while enabling business operations. Working closely with Security, Risk, Compliance, Audit, and Identity Governance teams, you will ensure privileged access is governed in accordance with regulatory requirements, internal policies, and Zero Trust security principles. The role requires a combination of technical expertise, operational excellence, stakeholder management, and continuous improvement, contributing to Apex's broader identity security strategy by expanding PAM coverage, improving automation, supporting cloud-native privileged access controls, and enhancing audit readiness across the organisation. Success in this role is measured by secure and compliant onboarding of privileged accounts, high platform availability, effective risk reduction, successful audit outcomes, strong stakeholder engagement, and continuous improvement of PAM capabilities across the enterprise.

Key duties and responsibilities:

CyberArk Platform Operations & Support

Administer, maintain, and support the CyberArk PAM platform, including PVWA, CPM, PSM, Safes, Platforms, Secure Cloud Access (SCA), and Endpoint Privilege Manager (EPM), ensuring platform stability, security, and availability. Manage day-to-day PAM operations, including service requests, privileged account lifecycle activities, user support, and operational escalations in line with agreed service levels. Monitor platform health, password rotation, reconciliation, session activity, system performance, and capacity to proactively identify and resolve issues. Troubleshoot incidents and platform failures, perform root cause analysis, and implement corrective actions to improve service reliability and user experience. Plan, coordinate, and execute CyberArk upgrades, patching, maintenance activities, and platform enhancements while minimising business disruption. Maintain operational procedures, runbooks, knowledge articles, and support documentation, while driving service improvements, operational efficiency, and adherence to support SLAs.

Privileged Access Onboarding, Integration & Automation

Own and deliver the end-to-end onboarding lifecycle for applications, infrastructure platforms, cloud services, and privileged accounts into CyberArk, including Safe and Platform configuration and enabling applications to leverage Privileged Session Manager (PSM). Lead onboarding engagements with application owners and technical teams, from discovery and requirements gathering through implementation, testing, go‑live, and operationalisation. Analyse privileged account usage, technical dependencies, and business requirements to design and implement CyberArk onboarding solutions for Windows, Linux/Unix, database, cloud, service, and application accounts. Configure and support CyberArk Secure Cloud Access (SCA) and Endpoint Privilege Manager (EPM) to secure privileged access across cloud and endpoint environments. Configure and validate password rotation, reconciliation, credential retrieval, privileged session management, and application integrations to ensure secure and compliant access controls. Drive automation, standardisation, documentation, and continuous improvement initiatives to accelerate onboarding delivery, improve operational efficiency, and expand PAM coverage across the organisation.

Privileged Access Governance, Risk & Compliance

Administer, maintain, and support the CyberArk PAM platform, including PVWA, CPM, PSM, Safes, Platforms, Secure Cloud Access (SCA), and Endpoint Privilege Manager (EPM), ensuring platform stability, security, and availability. Manage day-to-day PAM operations, including service requests, privileged account lifecycle activities, user support, and operational escalations in line with agreed service levels. Monitor platform health, password rotation, reconciliation, session activity, system performance, and capacity to proactively identify and resolve issues. Troubleshoot incidents and platform failures, perform root cause analysis, and implement corrective actions to improve service reliability and user experience. Plan, coordinate, and execute CyberArk upgrades, patching, maintenance activities, and platform enhancements while minimising business disruption. Maintain operational procedures, runbooks, knowledge articles, and support documentation, while driving service improvements, operational efficiency, and adherence to support SLAs.

Privileged Access Governance, Risk & Compliance

Administer, maintain, and support the CyberArk PAM platform, including PVWA, CPM, PSM, Safes, Platforms, Secure Cloud Access (SCA), and Endpoint Privilege Manager (EPM), ensuring platform stability, security, and availability. Manage day-to-day PAM operations, including service requests, privileged account lifecycle activities, user support, and operational escalations in line with agreed service levels. Monitor platform health, password rotation, reconciliation, session activity, system performance, and capacity to proactively identify and resolve issues. Troubleshoot incidents and platform failures, perform root cause analysis, and implement corrective actions to improve service reliability and user experience. Plan, coordinate, and execute CyberArk upgrades, patching, maintenance activities, and platform enhancements while minimising business disruption. Maintain operational procedures, runbooks, knowledge articles, and support documentation, while driving service improvements, operational efficiency, and adherence to support SLAs.

Cloud Security, Identity Governance & Stakeholder Engagement

Support and enhance privileged access controls across Microsoft Azure, Entra ID, cloud‑hosted environments, and CyberArk Secure Cloud Access (SCA) to ensure secure administration of cloud platforms and services. Collaborate with Security Engineering, Cloud Engineering, Infrastructure, Application Owners, Risk, Audit, and Service Management teams to deliver secure and compliant privileged access solutions. Support the integration of CyberArk with enterprise Identity Governance and Administration (IGA) platforms, including identity correlation, entitlement modelling, provisioning processes, and certification campaigns. Contribute to strategic identity security initiatives, cloud access governance programmes, PAM expansion projects, and the adoption of modern privileged access management capabilities. Provide technical guidance and CyberArk subject matter expertise during solution design, onboarding engagements, operational reviews, and security transformation initiatives. Communicate risks, control gaps, recommendations, and progress updates to stakeholders while supporting business objectives, regulatory compliance, and continuous improvement of the identity security landscape.

Experience and Knowledge:

5+ years' experience in Privileged Access Management (PAM), Identity & Access Management (IAM), Cyber Security, or related IT security disciplines within enterprise environments. Strong hands‑on experience administering and supporting CyberArk PAM solutions, including PVWA, CPM, PSM, Safes, Platforms, Secure Cloud Access (SCA), and Endpoint Privilege Manager (EPM). Proven experience delivering end‑to‑end onboarding of applications, infrastructure, cloud platforms, and privileged accounts into CyberArk, including discovery, design, implementation, testing, and operational handover. Solid understanding of privileged access management principles, including least privilege, privileged session management, password rotation, credential management, segregation of duties, and Zero Trust security models. Experience supporting privileged access governance activities, including access reviews, audit engagements, compliance requirements, risk remediation, and control validation. Strong analytical, troubleshooting, and problem‑solving skills, with the ability to perform business and technical analysis and resolve complex PAM‑related issues. Experience working with Microsoft Azure, Entra ID, Active Directory, ServiceNow, cloud platforms, and related identity and security technologies. Excellent stakeholder engagement and communication skills, with the ability to collaborate effectively across technical teams, business units, audit, risk, and compliance functions. Demonstrated ability to drive automation, process improvement, and operational efficiency initiatives within PAM or broader identity security programmes. Self‑motivated, proactive, and accountable, with the ability to take ownership of deliverables and manage activities through to successful completion.

Qualifications & Certifications:

Bachelor's degree in Information Technology, Computer Science, Information Security, or a related discipline, or equivalent industry experience. CyberArk Defender Certification (or equivalent CyberArk certification) preferred. Industry certifications such as CyberArk Sentry, Microsoft Security, Identity and Access Administrator (SC-300), AZ-500, Security+, or equivalent are advantageous. Demonstrated experience working within regulated, audit‑driven, or highly controlled environments is highly desirable.

About Apex Group We are dedicated to driving positive change in financial services while fuelling the growth and ambitions of asset managers, allocators, financial institutions, and family offices. Established in Bermuda in 2003, the Group has continually disrupted the asset serving industry through our investment in innovation and talent. Today, we set the pace in asset servicing and stand out for our unique single‑source solution and unified cross asset‑class platform which supports the entire value chain, harnesses leading innovative technology, and benefits from cross‑jurisdictional expertise delivered by a long‑standing management team and over 13,000 highly integrated professionals. We’re a people‑powered business, and our people are full of ambition. Together, we’re inspired to lead the new era of data and tech enabled service. Bringing new products and services to market. Sharpening our client focus. Disrupting the market to exceed expectations. Innovating across a range of specialisms. With our focus on making a difference to our people, our planet and our society, you’ll experience more here than you would at most other companies. Prepare to accelerate. We’re a people‑powered business with a vision to inspire a new era of service‑led FinTech. We’re expanding globally and offering more to our clients. This means you get more opportunities to grow with us. So prepare to accelerate. We’ll make sure the time and effort you put in takes you further, faster. Positive change starts with you. We’re a people‑powered business with a vision to inspire a new era of service‑led FinTech. We’re expanding globally and offering more to our clients. This means you get more opportunities to grow with us. So prepare to accelerate. We’ll make sure the time and effort you put in takes you further, faster. The journey is yours to own. When you stretch yourself, you grow. We want you to explore ways of working that will see you thrive as part of something bigger. We’ll help you with a solid structure, challenging projects, vibrant networks, supportive colleagues and approachable leaders. All the things you need to own your unique journey. Find out more about us