Business Analyst IAM Compliance & Audit Specialist (m/f/d)

Job description

About the Job 

We are seeking a dynamic and experienced Business Analyst IAM Compliance & Audit Specialist to join our Identity & Access Management (IAM) Tribe to support the integrity and compliance of our IAM systems and processes in alignment with regulations and internal policies.

In this role, you will be responsible for overseeing the management of our products and services managed by the Product Owners in the IAM Tribe. These products cover the standard solution of Allianz Group related Identity & Access Management (One Identity Manager), Privileged Access Management (CyberArk, PIM), Authentication Services and Directory Services.

As the Business Analyst IAM Compliance & Audit Specialist, you will play a critical role in the assurance of the compliance of our IAM services. Your primary responsibility will be to identify all relevant internal and regulatory requirements for our services, define solution for closing gaps and track its implementation.

You will work closely will all key stakeholder, including the Cluster Product Owners and Product Owners across other services and the Cluster for Access Control. Additionally, you will coordinate and support all internal and external audit of our IAM services.

What you do

• Oversee and coordinate legal and regulatory requirements for IAM in collaboration with the organization, ensuring compliance with standards like BaFin.
• Attend and prepare documentation for internal and external audits targeting IAM, acting as a subject matter expert to ensure systems align with applicable standards and regulations.
• Support the creation and maintenance of internal policies and procedures, working closely with the GRC team to propose and implement security controls and actionable compliance plans.
• Maintain and update the risk register, identifying operational and strategic patterns, and ensuring effective communication with relevant parties.
• Collaborate with the local Data Protection Officer (DPO) and Local Security Officer (LSO) to define, manage, and improve relevant interfaces and consult on local Information Security assurance reviews.
• Identify opportunities to leverage controls automation and perform continuous monitoring, assisting in training and raising awareness among employees regarding IAM-related compliance issues and best practices.
• Ensure effective communication and collaboration across teams to address IAM-related compliance issues and opportunities for improvement.

What you bring

• A high degree of professionalism, professional curiosity, and skepticism, organizational, analytical and project management skills.
• Strong written and verbal communication, interpersonal, presentation and organizational skills.
• Ability to work independently in an international team across multiple locations with global stakeholders.
• Thorough knowledge of the European regulatory environment applicable to financial institutions and proven ability to research, interpret and apply regulatory requirements.
• 3-5 years of experience in auditing technology-related areas e.g.: Enterprise security control frameworks, IT incident and problem management, Automated business process controls, IT Resilience and Disaster Recovery, Identity and Access Management / Privileged Access Management/Adaptive Authentication Solutions, change management, Perimeter/Internal Security Technologies (Firewalls, Intrusion Detection and Prevention Systems) 

What we offer

• We offer a hybrid work model which recognizes the value of striking a balance between in-person collaboration and remote working incl. up to 25 days per year working from abroad.
• We believe in rewarding performance and our compensation and benefits package includes a company bonus scheme, pension, employee shares program and multiple employee discounts (details vary by location).
• From career development and digital learning programs to international career mobility, we offer lifelong learning for our employees worldwide and an environment where innovation, delivery and empowerment are fostered.
• Flexible working, health and wellbeing offers (including healthcare and parental leave benefits) support to balance family and career and help our people return from career breaks with experience that nothing else can teach.