IAM and PAM Security Lead

The Work We Do Teciem designs, builds, and delivers treasury and capital markets software solutions for financial institutions worldwide. We serve banks of every size and geography, offering the right setup for the right need. Our solutions are designed to replace multiple disconnected systems with one complete, front-to-back platform, helping customers to capture trading and business opportunities quickly, clearly and with control. We cover the entire trading lifecycle, ensuring that everything - from execution to position keeping, to risk management – runs smoothly. With decades of experience and one of the largest, most diverse client bases in the industry, we turn deep industry knowledge into software that covers most asset classes, meets complex real-world treasury and capital market's needs, and adapts as markets evolve.   
 Key Responsibilities   Identity and Access Management (IAM) Governance & Identity Security   Define, maintain, and enforce IAM policies, standards, procedures, and security baselines.  Ensure effective Joiner-Mover-Leaver (JML) processes are implemented and followed across all platforms.  Review and approve role models, access profiles, RBAC structures, and entitlement frameworks.  Monitor identity lifecycle activities to ensure timely provisioning, modification, and deprovisioning of accounts.  Govern Microsoft Entra ID, Active Directory, and enterprise SaaS identity integrations from a security and compliance perspective.  Review and monitor implementation of MFA, passwordless authentication, Conditional Access, Identity Protection, and risk-based authentication controls.  Maintain an inventory of privileged, service, shared, and non-human accounts, ensuring ownership and accountability exist for all identities.  Identify excessive permissions, toxic combinations, dormant accounts, orphan accounts, and access anomalies.  Privileged Access Management (PAM) Governance   Act as the Information Security SME for enterprise PAM initiatives.  Define and maintain standards for privileged access, vaulting, credential management, session monitoring, and privileged account lifecycle management.  Review and validate privileged access requests and ensure appropriate approvals and business justifications exist.  Ensure privileged access follows least-privilege, just-in-time (JIT), and just-enough-access (JEA) principles.  Govern emergency and break-glass account management processes.  Review privileged account onboarding across servers, cloud environments, databases, applications, network devices, and client environments.  Validate credential rotation policies and monitor adherence to privileged account management requirements.  Review privileged session monitoring reports and identify unauthorized or risky privileged activities.    Access Reviews & Compliance   Manage enterprise-wide User Access Review (UAR) and access recertification programs.  Coordinate periodic privileged access reviews with…