Join a leading cybersecurity team focused on safeguarding valuable assets and preventing cyberattacks. We are dedicated to building secure, vigilant, and resilient organizations. This role plays a crucial part in embedding cyber risk management into strategic development to effectively handle information and technology risks. Explore more about our Cybersecurity practice.

This position involves overseeing and validating data security controls across the enterprise. The focus is on ensuring adherence to regulatory and internal standards, particularly concerning identity and access management, access control validation, database security, and evidence-based assurance in both on-premises and cloud environments.

Collaborate with technology, security, and data teams to implement and support data security controls. Assess the effectiveness of existing controls and identify areas for improvement. Conduct access control reviews, emphasizing Role-Based Access Control (RBAC) and dynamic access review processes. Validate identity and access management (IAM) controls for applications, databases, and infrastructure. Monitor and evaluate database access controls, including privileged access and segregation of duties. Identify and analyze database access bypass scenarios and control deficiencies. Support periodic and event-driven access reviews, ensuring prompt resolution of violations. Collect, verify, and document evidence for access controls, audits, and compliance. Analyze control testing outcomes and report access-related risks to management. Assist with regulatory and audit activities related to data security and access controls. Propose and implement enhancements for access control validation, monitoring, and reporting.

A Bachelor’s degree in Computer Science, Information Technology, or a related field is required. Possess at least 4 years of experience in Data Security, IAM, access control reviews, or cybersecurity GRC. A solid understanding of Identity and Access Management (IAM) concepts, RBAC, access governance, and database security is essential. Familiarity with security frameworks such as NIST CSF, CIS, and ISO 27001 is necessary. Demonstrated strong analytical and problem-solving capabilities. Excellent communication and documentation skills are a must. Ability to manage multiple priorities and work autonomously is expected.

Valuable additions include experience with access governance and IAM tools, exposure to automation or scripting for access reviews, familiarity with cloud databases (AWS/Azure), and experience analyzing cross-environment access bypass scenarios. Relevant certifications like CISSP, CISA, or CRISC are a plus.