28 Oct
|
Cybersecurity-NxxT
|
India
28 Oct
Cybersecurity-NxxT
India
Job Role
- RBAC Specialist Location – India/Remote
Job Type
- Full-time Experience Level: 3+ years of dedicated experience focusing on role engineering, role mining, SoD and RBAC design." Project Overview: We are seeking an experienced IAM Consultant to lead a targeted Role Discovery and RBAC (Role-Based Access Control) Matrix initiative in a highly regulated banking environment, ensuring precise access alignment is critical for operational efficiency, fraud prevention, and regulatory compliance (e.g., SAMA, NCA, CBUAE, SCA, VARA, GDPR, PCI-DSS). The consultant will analyze current access patterns across key financial and operational applications, design a scalable RBAC framework, and deliver a comprehensive, audit-ready RBAC Matrix.
Key Responsibilities
1. Role Discovery & Analysis
• Conduct interviews and workshops with business unit leads, application owners, and risk teams to understand business functions and operational workflows.
• Analyze existing user access data, entitlements, and group memberships to identify patterns, redundancies, and “birthright"" access requirements.
• Perform Segregation of Duties (SoD) risk analysis to ensure no single role contains toxic combinations of access (e.g., creating vs. approving a wire transfer). 2. RBAC Architecture & Matrix Design
• Define and map out Business Roles (what a person does) to Technical Roles (what system entitlements they need).
• Build a comprehensive,
multi-dimensional RBAC Matrix that clearly aligns job functions with specific application permissions.
• Establish explicit naming conventions and structural rules for roles that align with modern IAM governance frameworks. 3. Documentation & Handover
• Create formal documentation outlining the role engineering methodology, discovery findings, and assumptions made during the project.
• Document a governance framework/process for how the new RBAC matrix should be maintained, reviewed, and updated as business needs to evolve.
• Provide an implementation-ready roadmap for our internal engineering/IAM team to ingest the matrix into our IAM/IGA platforms.
• A standard operating procedure (SOP) detailing how to request new roles, modify existing ones, and perform periodic access reviews." Required Skills &
Qualifications:
Banking/Finance Expertise: Strong understanding of banking applications, financial workflows, and strict regulatory frameworks (e.g., SAMA, NCA, CBUAE, SCA, VARA, GDPR, PCI-DSS). Technical Proficiency:
• Advanced data manipulation skills (Expert-level Excel/PowerBI, or Python/SQL) to parse and clean massive entitlement dumps. Soft
Skills:
Excellent stakeholder management and communication skills. You must be comfortable translating technical system entitlements into business logic when talking to non-technical business leaders.
📌 RBAC Specialist (India)
🏢 Cybersecurity-NxxT
📍 India