Hybrid Identity and Access Management Analyst

at Fitch Group, Inc.

• Job title: Identity and Access Management Analyst
• Job type: Full Time
• Experience level: Mid level, Senior
• Salary: Not specified
• Degree requirement: Bachelor's Degree
• Tech skills: AWS, Cloud, Linux
• Location requirements: Hybrid, Manchester, United Kingdom

About the role

• Identity and Access Management Analyst at Fitch Group providing IAM governance and support in Manchester. Focusing on control execution, audit readiness, and identity management operations.

Responsibilities

• Provide first-line support for IAM/PAM requests, triage issues, resolve access and permissions problems, and escalate to senior team members or vendors as needed
• Maintain and enhance IAM control libraries, SOPs, runbooks, and user guides; ensure documentation reflects control owners, frequencies, and evidence requirements
• Monitor platform health, integrations, and performance; raise and track tickets with vendors or internal teams to timely resolution
• Operate and administer the IAM program, covering account onboarding, entitlement management, password rotation, session management, approvals, break-glass, and attestations
• Evidence IAM governance controls (Joiner–Mover–Leaver processes, RBAC, least privilege, separation of duties, access certifications), ensuring consistent documentation and traceability
• Serve as a key liaison for audit engagements (e.g., SOX, Dodd Frank, internal audits), preparing evidence, conducting walkthroughs, producing reports, responding to queries, and tracking remediation to completion
• Support onboarding of applications, systems, and service accounts into IAM/PAM, working with product owners, engineering/operations teams to ensure secure and governed integration
• Generate metrics and dashboards on IAM/PAM operations, control performance, remediation status, audit readiness, and platform adoption
• Instruct and educate teams and end users on Delinea features, privileged access practices, secrets management, and audit evidence expectations; deliver guidance through documentation, meetings, and enablement sessions
• Apply AI-enabled tooling and techniques to improve monitoring, anomaly detection, evidence collection, and reporting within IAM/PAM operations, while adhering to governance and data protection standards
• Manage non-human identities and secrets (service accounts, application credentials, API keys, certificates), including vaulting and lifecycle governance
• Support distributed vaulting via Delinea external secrets and ensure secure, compliant configurations

Requirements

• 3+ years in IAM/PAM operations, IT controls, audit support, or related technical support in a complex environment
• Direct operational experience with Delinea Secret Server (Delinea Platform) and SailPoint Identity Security Cloud is strongly preferred
• Experience with audit or regulatory engagements (e.g., SOX, Dodd Frank, SOC2), including evidence preparation, presentation of controls, and remediation tracking
• Strong governance orientation and practical understanding of IAM/PAM principles: JML, RBAC, least privilege, separation of duties, access certification, privileged session management, password rotation, and break-glass procedures
• Familiarity with non-human identity and secrets management, including service account lifecycle, credential vaulting, time-bound access, attestations, and distributed vaulting via external secrets (e.g. AWS Secrets Manager)
• Competence in using AI-enabled tools or analytics to enhance operational monitoring, control evidence, and reporting; ability to evaluate AI outputs critically and maintain governance standards
• Excellent written and verbal communication skills; ability to translate technical and control concepts into clear business language and to educate stakeholders effectively
• Strong analytical skills, attention to detail, and time management; ability to shift fluidly between priorities and meet deadlines
• Experience with collaboration and documentation tools such as Microsoft 365 (SharePoint Online, Teams) and Atlassian suite (Confluence, Jira)
• Working knowledge of directory services and identity platforms (e.g. Entra ID, Active Directory) and common enterprise environments (e.g., Linux, Windows Server)

Benefits

• Hybrid Work Environment: 2 days a week in office required based on your line of business and location
• A Culture of Learning & Mobility: Dedicated trainings, leadership development and mentorship programs designed to ensure that your time at Fitch will be a continuous learning opportunity
• Investing in Your Future: Retirement planning, financial wellness and tuition reimbursement programs that empower you to achieve your short and long-term goals
• Promoting Health & Wellness: Comprehensive healthcare offerings that prioritize a healthy body & mind
• Supportive Parenting Policies: Family-first policies, including a generous global parental leave plan, designed to help you balance career and family life effectively
• Dedication to Giving Back: Paid volunteer days and support for community engagement initiatives