IAM Security Specialist

Job Title: IAM Security Specialist

GENERAL DESCRIPTION:

The IAM Security Specialist is responsible for leading oversight of managed security services provider (MSSP) activities to ensure user access to systems, data, and applications is managed in alignment with organizational procedures, standards, and regulatory requirements, including FRB, NYDFS, GDPR, and NIST expectations. This role exercises independent judgment in validating that authorized users are granted appropriate access, confirming IAM policies are implemented and enforced, and promoting the integrity and security of the IAM environment through proactive monitoring, quality assurance, and continuous improvement.

Additionally, the IAM Security Specialist supports and advances the organization’s IAM program by coordinating access governance activities, reviewing user access certification results, identifying control gaps, recommending process improvements, and partnering with business and technology stakeholders to strengthen compliance and operational effectiveness.

Reporting to the IAM Operations Manager, the Specialist serves as a subject matter contributor for identity-related controls, provides guidance to Analysts and MSSP resources, supports escalations, and helps ensure controls are effectively and consistently implemented across business units.

ESSENTIAL DUTIES AND RESPONSIBILITIES:

• Lead oversight and quality validation of the MSSP’s user account lifecycle activities, including creation, modification, deletion of user accounts, and management of user roles and permissions, ensuring adherence to organizational policies, standards, and regulatory requirements.
• Monitor, assess, and escalate MSSP handling of end-user password resets and access requests to ensure timely resolution, SLA adherence, and compliance with established security protocols.Evaluate the MSSP’s implementation and enforcement of access control policies and procedures, validating that access is appropriate, authorized, and aligned with least privilege and segregation of duties principles.
• Lead coordination and review of access management incident response activities, ensuring timely resolution, effective escalation, root cause analysis, and documentation of corrective actions.
• Identify and recommend opportunities to improve IAM processes through automation, standardization, and enhanced controls, while supervising MSSP implementation and operational adoption.
• Manage escalations and complex issue resolution with the MSSP, application owners, and business stakeholders related to access management, role assignments, and certification concerns.
• Track, analyze, and report on MSSP remediation efforts associated with access review findings, ensuring issues are resolved timely and recurring trends are identified for management attention.
• Provide direction, review, and quality assurance for the MSSP’s configuration, execution, and completion of periodic access certification campaigns, including application data, user access, enterprise roles and entitlements, and service and generic account reviews.
• Support and enhance the RBAC lifecycle by validating role data, analyzing access patterns, reviewing role definitions, and partnering with stakeholders to improve role quality and governance outcomes.
• Maintain oversight of access governance documentation managed by the MSSP, including review schedules, process workflows, and audit evidence.
• Partner with application owners and business stakeholders to gather requirements, assess access needs, and guide improvements to Enterprise Role design, quality, and sustainability.
• Provide oversight and guidance to the MSSP in delivering user training and support on IAM policies, procedures, and system usage, ensuring consistency and clarity for all users.
• Monitor and maintain oversight of written procedure documentation related to identity and access management provisioning, terminations, and transfers, verifying that MSSP practices align with organizational standards.
• Provide oversight and guidance to the MSSP in delivering user training and support on IAM policies, procedures, and system usage, ensuring consistent communication and understanding across the organization.
• Coordinate identity access management-related audit requests, including evidence collection, validation, issue follow-up, and timely response to internal and external auditors.

QUALIFICATIONS AND EXPERIENCE

• Bachelor’s degree in information systems, cybersecurity, computer science, or related discipline (or equivalent work experience).
• Minimum of 3-5 years of experience in identity and access management, access governance, security administration, IT audit, compliance, or a similar role.
• Practical experience administering, supporting, or providing governance oversight for Identity and Access Management (IAM) platforms, such as Saviynt, SailPoint, or equivalent technologies.
• Proficiency with Active Directory, LDAP, SSO, and other IAM technologies (e.g., Saviynt, SailPoint).
• Strong understanding of authentication, authorization, role-based access control (RBAC), least privilege, segregation of duties, and access certification concepts.
• Demonstrated ability to analyze, troubleshoot, and resolve moderately complex issues related to identities, access, accounts, authentication, authorization, entitlements, and permissions.
• Experience developing, reviewing, and improving written documentation for identity and access management processes, controls, procedures, and audit evidence.
• Strong organizational, analytical, and problem-solving skills, with the ability to manage multiple priorities, identify process gaps, and recommend practical solutions.
• Effective verbal and written communication skills, with the ability to guide MSSP resources, collaborate with technical and non-technical stakeholders, and communicate risks, findings, and recommendations clearly.
• Familiarity with banking services, policies, procedures, and regulatory compliance requirements (such as AML/BSA/Cyber Security) is a plus.

EDUCATION:

Bachelor’s degree in computer science, information systems, information security, or related discipline preferred, or equivalent work experience.

CERTIFICATIONS:

Not required.

Important: The candidate must provide evidence of academic preparation or courses related to the job posting, if necessary.

Our hybrid workplace model is a flexible benefit designed to support the evolving needs of our organization and team members. As priorities and circumstances change, work arrangements may be adjusted to ensure alignment with organizational goals and employee well-being.

ABOUT US

Popular is Puerto Rico’s leading financial institution and have been evolving since it was founded over a century ago. From a small bank it has developed into a large corporation that offer a wide variety of services and financial solutions to our customers, with presence in the United States, the Caribbean and Latin America.

As employees, we are dedicated to making our customers dreams come true by offering financial solutions in each stage of their life. Our extensive trajectory demonstrates the resiliency and determination of our employees to innovate, reach for the right solutions and strongly support the communities we serve; therefore, we value their diverse skills, experiences and backgrounds.

We reaffirm our commitment to always offer essential financial services and solutions for our customers and communities, including during emergency situations and/or natural disasters. Popular’s employees are considered essential workers, whose role is critical in the continuity of these important services even under such circumstances. By applying to this position, you acknowledge that Popular may require your services during and immediately after any such events.

If you have a disability or need more information about requesting an accommodation, please contact us at [email protected]. This email inbox is monitored for such types of requests only. All information you provide will be kept confidential and will be used only to the extent required to provide needed exemptions or reasonable accommodations. Any other correspondence will not receive a response.

Are you ready for a rewarding career?

Popular is an Equal Opportunity Employer, including Disability/Vets. Popular is a Drug Free Workplace

Learn more about us at www.popular.com and keep updated with our latest job postings at www.jobs.popular.com.

Connect with us!

LinkedIn | Facebook | Twitter | Instagram

If you are a California resident, please click here to learn more about your privacy rights.