Information Technology Security Specialist

SUMMARY:

The Security Specialist – Access Management is essential in managing and securing identities and accounts. The Access Administrator is responsible for the setup, configuration, and maintenance of user profiles and privileges, ensuring proper access controls are in place and adhered to. The Administrator conducts regular auditing of account usage, resetting of passwords, and responding to user access issues. Access Management works closely with the security policies to identify potential unauthorized access, contributing to the overall security posture. Attention to detail and understanding of complex permission sets are critical in facilitating smooth operations and protecting sensitive information.

Roles and Responsibilities:

• Ensure that all access requests on managed systems and platforms are fulfilled in compliance with requirements of all applicable processes, policies, certified standards, and regulations.
• Ensure removal of physical and logical access is completed promptly for departed personnel.
• Manage Physical Access (door access cards and ID Cards).
• Manage accounts and access in multiple systems and applications (Windows, SAP, Office 365, custom applications, etc.).
• Observe all client security policies and identify required changes.
• Ensure that security procedures are properly documented and adequately protect the computer and information assets of client.
• Perform security audits and reporting and participate in internal and external audits as required.
• Participate in project activity to implement security or access control solutions.
• Maintain application and data owners and provide training/support.
• Distribution and recovery of credentials and security tokens.
• Control and audit of elevated privileged accounts.
• Respond to incidents relating to security access.
• NERC CIP compliance activities related to Access Management and Information Management.

REQUIRED QUALIFICATIONS:

• CISSP or similar