Analista de Segurança da Informação Pleno na Youse, atuando em controle de IAM na AWS e governança. Responsável pela supervisão de acessos e colaboração com equipes de segurança.
Responsibilities
Design and maintain IAM controls in AWS (IAM, roles, policies, SSO/IAM Identity Center);
Lead and oversee access certification campaigns;
Define, evaluate, and monitor Segregation of Duties (SoD) and conflicting access risks;
Assess sensitive and privileged access;
Support the 2nd line of defense in defining policies, standards, and Identity and Access Management controls;
Collaborate with IT, Security, Audit, and Compliance teams;
Support internal and external audits by providing evidence of IAM controls and processes;
Promote best practices such as least privilege, Zero Trust, MFA, and SSO.
Requirements
Strong hands-on experience in IAM at a senior level, with both technical and governance perspectives;
Strong knowledge of AWS and cloud identity;
Experience with IAM/governance tools (e.g., Entra ID, Okta, SailPoint, Saviynt, or similar);
Practical experience with access certification campaigns, SoD, and SAT;
Knowledge of risk and compliance frameworks (e.g., controls, audits, regulatory), such as NIST, ISO 27001, CIS Controls, among others;
Good communication skills and the ability to operate cross-functionally (2nd line of defense).
Benefits
Hybrid (2 days on-site per week and 3 days remote)
Cybersecurity Analyst assisting in the review and implementation of cybersecurity initiatives across a large environment at Kemper. Responding to cyber threats and improving processes and technologies.
Senior Information Security Analyst managing Information Security Management System at BMLL Technology. Supporting compliance with ISO 27001 and enhancing security measures.
Graduate Cyber Security Analyst at McKesson participating in a 24 - month Cyber Academy program. Monitor security alerts and contribute to incident response efforts while gaining mentorship.
Threat Intelligence Analyst role analyzing cyber threats and providing strategic recommendations. Working with cybersecurity teams at PwC Canada to safeguard client data and systems.
Contract Security Analyst specializing in security operations and incident response for cloud security at Embark. Focus on alert handling, detection engineering, and data loss prevention.
Cyber Security Analyst providing security operations support for USAF Cloud One project. Engaging in incident response and cybersecurity compliance activities within a hybrid environment.
Cybersecurity Analyst responsible for monitoring, analyzing, and responding to security incidents in SOC. Developing detection rules and conducting threat - hunting campaigns within a hybrid work setup.
Information Security Analyst working with Optasia to enforce security controls and protect data. Collaborating on technical projects and auditing systems in a hybrid work environment.
Cyber Security Analyst investigating and responding to security events at A+E Global Media. Collaborating cross - functionally to improve detection and response processes.
Information Security Analyst handling security monitoring and incident response tasks for educational technology company. Collaborating with IT teams to enhance security measures and compliance.