SDS is looking for a motivated leader with strong operational experience in all aspects of access management to join our team as the Director of IAM Business Analysis. You will be responsible for overseeing the design, implementation, and maintenance of the access control policies, processes, and systems across the US business units. You will ensure compliance with regulatory requirements, industry standards, and Santander's global policies. You will lead a team of ten professionals, reporting dire
Education Experience:
Bachelor's degree in computer science, information security, or related field, or equivalent work experience. Over 7 years of relevant experience in Identity & Access Management, preferably in the financial services industry.Certifications in IAM such as CISSP, CIAM, CISM, CISA, CRISC, etc., preferred.Duties Responsabilies:
Manages team of professionals who are responsible for the IAM Business Analyst functions across multiple entities within the firm local and Global.
¿ Provides consultation to business partners; enable businesses to effectively manage risk within their risk appetite and meet business objectives. Facilitate communication and execution of enterprise-wide information security programs and deliver enterprise awareness training.
¿ Conducts risk assessments on business applications, third parties and infrastructure and validate that security and technology controls are implemented to support business requirements.
¿ Creates documentation that leads the development and/or implementation of significant or Bank-wide Technology Controls / Information Security strategies, policies, programs, tools and provide expert advice and guidance on technical solutions.
¿ Distributes and supports the on-boarding in SailPoint of all regulatory (SOX/GLBA) application deliverables.
¿ Provides system support to all application owners and validates the integrity of data provided by owners.
¿ Reviews and conducts requirements gathering between Identity and Access management system integration team and quality assurance teams.
¿ Interaction with application owners and business managers to build solid working relationships.
¿ Able to communicate with internal and external Audit, Internal Control and Global Risk and Compliance.
¿ Clear understanding of the SOD policies and Toxic combinations.
¿ Knowledge of the Roles Based Access Control (RBAC) approach.
¿ Review SLAs and metrics of the IAM services.
Competencies: