07 Aug
|
Invesco
|
Charlottetown
07 Aug
Invesco
Charlottetown
As one of the world’s leading independent global investment firms, Invesco is dedicated to rethinking possibilities for our clients. By delivering the combined power of our distinctive investment management capabilities, we provide a wide range of investment strategies and vehicles to our clients around the world. If you're looking for challenging work, intelligent colleagues, and exposure across a global footprint, come explore your potential at Invesco.
Job Description
Our Identity & Access Management team protects Invesco against a dynamic threat landscape and advances Invesco’s purpose by empowering and enforcing secure access to drive desired business outcomes and digital experience goals. We collaborate and partner with Business Units, Technology and Security to address IAM risks, provide IAM platform/solution services, standardize IAM processes and support evolving business needs in the areas of Governance, Operations, Technical Enablement and Transformation. Invesco’s Privileged Access Management (PAM) program aims to prioritize the protection of the most critical assets and applications by establishing efficient, scalable processes and tools while maximizing security for its privileged accounts.
Your Role
We’re seeking a Senior Analyst to join a fast‑paced team working with Business and Technology clients across the globe in relation to their Identity and Access Management (IAM) needs, specifically Privileged Access Management. You will serve as an IAM team member within the IAM Governance team responsible for supporting activities within the IAM program to increase security posture by ensuring information security standards and controls specific to IAM have been implemented appropriately across Invesco, specifically supporting our PAM program.
Responsibilities
- Serve as a senior representative and advisor to the IAM Governance Team Manager; assist in mentoring other team members; represent Manager when needed; assist Manager with team strategic direction.
- Own and manage assigned IAM workstreams end‑to‑end; coordinate and implement work efforts; provide updates on progress to PAM working groups and/or IAM Steering Committee.
- Standards and Policies: lead or drive requirements and design discussions providing input in the design of privileged identity and access policies, standards, controls, roles and processes globally while ensuring consistency regardless of technologies in use.
- Processes and Procedures: maintain PAM processes and procedures documentation in repository; coordinate refresh and development of processes and procedures documentation, knowledge articles as new capabilities are introduced; provide advisement on process and procedures to align with best practices and perform peer reviews.
- Standardise procedures and provide oversight of onboarding of privileged accounts to our vaulting, identity governance and inventory solutions to enhance owner experience associated with onboarding and password management.
- Enforcement Monitoring: enforce IAM and PAM policies, procedures, and configuration standards through monitoring for compliance; engage with teams and facilitate remediation upon ad‑hoc notification of issues or non‑compliance with policies and standards; support documentation of exceptions and deferred PAM remediation with justifications and mitigating controls for applications that cannot be integrated with Invesco PAM Systems.
- Metrics and Reporting: lead and produce IAM and PAM metrics, reporting, and insights.
- Audit and Compliance: liaise with internal and external audit teams for all IAM related controls, operational effectiveness and evidence during testing; assist with management responses and remediation activities; assist Technology and auditors in periodic assessments of the IAM solution and its components; lead or drive requirements and design discussions, develop and update training and security awareness content for adoption of Invesco PAM Systems for onboarded privileged accounts and to raise awareness of PAM.
- Act as primary IAM point of contact for audit and compliance, responding to inquiries related to IAM policies, platforms, tools and appropriate use, including for Privileged Access Management.
- Partner with IAM Onboarding, IAM Solutions and IAM Operations teams to design and deliver PAM solutions and related processes for the enterprise in a highly complex environment with a blend of legacy and innovation platforms.
The experience you bring
- 5+ years Information Technology and/or Information Security experience.
- Current and in‑depth knowledge and understanding of IAM and PAM security concepts.
- Experience with IAM capabilities including access provisioning and deprovisioning, identity lifecycle management, role‑based/attribute‑based access control, authoritative sources, access certification.
- Experience with PAM capabilities including discovery and analysis, inventory and classification, vaulting, credential management, session monitoring.
- Experience with federation/cloud access, authentication, including MFA and single sign‑on.
- Experience with SailPoint IdentityIQ, Identity Security Cloud,
Machine Identity Security or related IAM platform solutions; experience with CyberArk.
- Experience with Windows, Unix, Active Directory, Azure/Entra, AWS, SQL, Oracle environments.
- System administration and access administration, including Active Directory, highly desired.
- Experience with applying technology and/or access‑related general controls and an understanding of various regulatory requirements (Sarbanes‑Oxley, GDPR, etc.).
- Understanding of security frameworks and standards (NIST, ISO 27001, etc.).
- Experience in project management as a team member, workstream lead, as well as use of PM methodologies and tools (Waterfall, Agile, Jira, Confluence).
- Strong communication skills; proven ability to effectively sell ideas and build consensus. Possesses diplomacy and cooperative style necessary to interface effectively with all personalities and across functional disciplines.
- Effective presentation skills for technical and non‑technical groups at all levels within the organization. Experience creating visual content via slides, graphs, dashboards articulating messages and key points using various tools (PowerPoint, PowerBI, spreadsheets).
- Strong analytical skills with ability to define, collect, analyze data, establish facts, draw valid conclusions, and make fact‑based decisions. You can bring clarity to chaos and you’re comfortable working with ambiguity (e.g. imperfect data, loosely defined concepts, ideas, or goals) and translating these into more tangible outputs.
- Enjoy challenging and thought‑provoking work and have a strong desire to learn and progress.
- Ability to manage multiple tasks and requests and react positively under pressure to meet tight deadlines. Structured, disciplined approach to work, with attention to detail. Versatile – able to meet changing requirements and priorities.
- Motivated self‑starter, strong problem‑solving skills, with positive attitude, team focused, with ability to work independently and remotely with limited supervision.
- A Bachelor’s Degree in Business, Management Information Systems or Computer Science is preferred or commensurate relevant work experience is preferred.
- Relevant industry certifications obtained or current within past 3 years preferred (CRISC, GSLC, CISM, CISSP, CISA).
What’s in it for you?
- Hybrid working environment.
- RRSP Contributions.
- Health & Wellness Benefits.
- Work flexibility Programs.
- Parental Leave Benefits.
- Study Support.
Invesco is committed to fair and accessible employment practices. If selected for an interview, we will work with you to ensure that your interview is accessible and accommodation is provided. Please contact us at or to let us know if you require accommodation for an interview due to a disability.
#J-18808-Ljbffr
📌 Sr. Analyst, Privileged Access Management (Charlottetown)
🏢 Invesco
📍 Charlottetown