Identity and Access Management Risk Analyst

Overview

We are a values driven organization putting Relationships FIRST. EagleBank (NASDAQ - EGBN) is focused on being Flexible, Involved, Responsive, Strong, and Trusted. By prioritizing meaningful connections with our customers, employees, and shareholders, we relentlessly deliver the most compelling, valuable service to our customers.EagleBank is committed to inclusion, equity, and respect. We celebrate diversity and intentionally seek out opportunities to learn from one another’s experience. We believe employees are essential to the building of relationships and we prioritize investing in employee growth and wellbeing. Employee involvement is fostered through resource groups, mentorship programs, community service, and scholarship opportunities for continued education. With features including maternity and parental leaves, wellness discounts, healthcare premium sharing, employer funding in your HSA account, and 100% 401(k) matching up to 4%, we pride ourselves in the ways we support our internal relationships. The minimum and maximum projected annualized salary for this position is: $84,757.00 to $137,443.20. Additional compensation may be possible based on experience and skills.

Responsibilities

The Identity and Access Risk Analyst supports governance and oversight of EagleBank people, process and technology related to access management and related risks. Acts as part of the team defining and enforcing Second Line of Defense (2LOD) governance of First Line of Defense (1LOD) operational teams' provisioning, credentialing, entitlement, certification, and overall identity and access lifecycle management. MAJOR DUTIES AND RESPONSIBILITIES

• Supports development and operationalization of EagleBank 2LOD Identity and Access Management Program and supporting documentation using knowledge and expertise related to identity compliance requirements and industry best practices.
• Defines and operationalizes 1LOD and 2LOD accountability for IAM Program activities.
• Defines requirements and processes for role-based access controls. May support implementation of 1LOD processes to ensure adherence to 2LOD requirements.
• Analyzes/assesses user access roles, permissions, and profiles for alignment with EagleBank IAM Program requirements.
• Works closely with Application, System, and Network Engineers to implement requirements for managing identities, reviewing existing procedures, and implementing best practices for user access management.

Qualifications

Requirements:

• Bachelor’s Degree in Technology Management, Information Systems Management, Computer Science, or a similar field.
• 3 years experience in providing operational support of IAM tools for entitlement and access reviews
• 2 years prior experience using IAM tools to establish user access roles, permissions, and profiles or similar technical role
• 1 year experience applying risk management concepts to information technology and identity management scenarios.
• 1 year experience with Identity Access and Governance tools like SailPoint, CyberArk, Active Directory, and Azure AD (Entra ID).
• Identity Governance and Administration, including establishment of IAM technical and security requirements for implementation by vendors or internal application teams
• NIST SP 800-63
• Active Directory and LDAP protocols
• Single Sign On & Federation using ADFS
• Multi-Factor Authentication
• Independent project management
• API security concepts
• Administration of best-in-class IAM Tools
• CIMP - Identity Management Institute Certified Identity Management Professional

Preferences:

• CISM - Certified Information Security Manager; CRISC could substitute for this
• CompTIA Security+ Certification
• Certified Information Systems Auditor (CISA)
• CIAM - Identity Management Institute Certified Identity & Access Manager or Microsoft Identity and Access Administrator and Certified in Risk and Information System Controls

Don't meet all the requirements? We encourage you to still apply if you think you are the right person to join our community. We are always interested connecting with people inspired by our mission and values. If you aren't hired for this position, your resume will remain available for the next year and might be considered for future openings. Note: You can update your resume as often as needed.