Identity Access Management - Information Risk Analyst

Job description

JPMorgan Chase & Co. (NYSE: JPM ) is a leading global financial services firm with assets of $2.6 trillion and operations worldwide. The firm is a leader in investment banking, financial services for consumers and small business, commercial banking, financial transaction processing, and asset management. A component of the Dow Jones Industrial Average, JPMorgan Chase & Co. serves millions of consumers in the United States and many of the world's most prominent corporate, institutional and government clients under its J.P. Morgan and Chase brands. Information about JPMorgan Chase & Co. is available at www.jpmorganchase.com .

Technology Controls (TC) delivers streamlined and consistent solutions supporting JPMorgan Chase's Controls and IT Risk agendas with a focus on risk reduction, stability, security, delivery, resiliency and efficiencies. TC's focus on standardization, consistency and simplicity fosters long-term productivity, quality and innovation across JPMorgan Chase. The disciplines within this organization are Oversight & Controls Technology, Cloud Controls, Identity & Access Management, IT Risk & Controls, and Third Party Risk Management.

Global Identity and Access Management provides identity and access management solutions for the firm's infrastructure and applications. The team ensures that appropriate access controls are in place and applied effectively and continuously

Job Summary

The Access Operations team is part of the Global Identity and Access Management, which is within CTR. The team is responsible for ensuring controls around system and user access are carried out according to internal policy and regulatory requirements. This covers integration of entities to access request tools, user and entitlement recertification, profile management, segregation of duties, audit management and other control initiatives.

ID Cert Integration and Request Tool Migration Team:
· Ensure all Entities are on-boarded to Certification, Termination and Transfer processing and deliver a robust Access Provisioning Framework that accurately process access provisioning and de-provisioning requests.
Primary Duties and Responsibilities
· Responsible for analysis, design and development of the access request workflows in the firm approved request tools, in comformity to audit set standards.
· Ensures application workflow onboarding requests are initiated, processed timely and accurately.
· Document access workflow onboarding requirements, initiate calls/meetings, prepare an onboarding plan and manage the lifecycle of the process
· Work with a team of workflow developers/project administrators, partners and report to managers in a global team environment
· Analysis of the access control gaps across the application workflows in request tools, documentation of the RCA and submission of the attestation evidences.
· Data extraction from databases of various in-house tools.
· Access provisioning failures monitoring and remediation.
· Identify ways to increase efficiencies of processes
· Gather operational metrics and update progress in trackers
· Document and update related procedures in SharePoint environment
· Act as the liaison between the Application Developers, Database Administrators, Business Units, various technology and support teams
· Partner and coordinate with Information Owners, Technology Control Officers and Application

Desired profile

·  2-3 years of hands on analysis & development experience is preferred.
·  Bachelor's Degree in Engineering in information technology related field or equivalent experience in the Identity and Access Management field
·  Must have 1-2 years experience with one or more JPMorgan Identity and Access Management tools OR atleast 1 role based access management tools in the market.
·  Project Management experience including solid knowledge of Identity and Access Management controls, principles, methods, SOX/SSAE16 and regulatory related obligations preferred
·  Solid understanding of the global banking business and operations
·  Solid knowledge of IT risk management frameworks/concepts preferred
·  Self-motivated with excellent analytical, communication and problem-solving skills with ability to independently develop solutions to complex analytical/data-driven problems
·  Ability to facilitate meetings among stakeholders with diverse and sometimes conflicting points of view, including strong negotiation skills and developing strong client relationships
·  Highly proficient in MS Office Suite (Excel, Word, Project, PowerPoint, Access, SharePoint and Visio)
·  Working knowledge of SQL/Oracle queries is a must.