Key Accountabilities and Responsibilities
- Overall responsibility for the development and maintenance of PAM policies and procedures, encompassing all human and non-human privileged users.
- Delivery of the PAM service via our chosen software and service partners.
- Continuously improve the PAM process, including alignment with IAM specific processes, to ensure the least privileged access is provided for the minimum time possible.
- Continuously improve Endpoint rules and processes to enable the business to operate successfully with least privilege on Endpoints.
- Provide accurate data analytics to ensure visibility of key metrics and use of this data (combined with audit procedures) to ensure least privilege of users, just in time escalated privileges and no toxic privileged access.
- Identify PAM related risks and proactively work to ensure that these risks are identified, assessed and mitigated across the business.
- Engagement and communication with stakeholders across JLR to ensure awareness of PAM & EPM policies and procedures.
- Act as a point of escalation for any PAM alerts or issues which has been raised by other departments, or potentially from monitoring systems.
- Keep abreast of trends in information security and be able to propose proactive mitigation as appropriate
- Provide consultancy on PAM Best Practices to different stakeholders/teams
- Key Interactions
- IAM SME & Product Owner (part of the IAM Team)
- CISO and the wider Information & Cyber Security Leadership Team.
- Head of Enterprise, Data & Infrastructure & ED&I; Leadership Team
- Head of IT Corporate Audit
Knowledge, Skills and Experience Essential:
- Significant prior experience as a subject matter expert within Identity and Access Management, in particular deep technical knowledge of identity management and privilege escalation within a Microsoft Workplace (Windows Operating Systems & Active Directory), Linux based operating systems (desktop & server), Core infrastructure (network, da