Our client is looking for an IAM Business Analyst
Position Overview
As an IAM Business Analyst, you will play a pivotal role in strengthening our Identity and Access Management (IAM) processes. You will be responsible for analysing and improving key IAM workflows, including the Join, Move, Leave (JML) lifecycle, access recertification, and privileged account management. Your insights will help shape a secure and efficient identity governance framework across the organisation, in alignment with regulatory requirements such as NIS2.
Your mission
- Conduct a comprehensive as-is analysis of current IAM processes and tools.
- Review and optimise the Join, Move, Leave (JML) process to ensure timely and secure access provisioning and deprovisioning.
- Collaborate with stakeholders to enhance the access recertification process, ensuring compliance and reducing access risks.
- Evaluate and propose improvements to the privileged account management strategy, including governance, monitoring, and automation.
- Ensure IAM practices are aligned with NIS2 directives and other relevant regulatory frameworks.
- Document findings, define business requirements, and support the implementation of IAM solutions.
- Act as a liaison between business units, HR, IT, and security teams to align IAM initiatives with organisational goals.
Your profile
- 15+ years in IT/IAM/Security, with 10+ years as business IAM analyst.
- Proven experience as a Business Analyst in IAM, cybersecurity, or IT governance domains.
- Strong understanding of:
- Privileged account management principles and tools.
- Access recertification processes and compliance requirements.
- Identity lifecycle management and access controls.
- Demonstrated ability to work effectively with HR and cross-functional stakeholders, translating business needs into actionable IAM requirements.
- Technical awareness of key IAM protocols and standards, including:
- OpenID Connect, OAuth 2.0, and Kerberos—understanding their role in authentication and authorisation flows.
- SSO, MFA, and Conditional Access concepts.
- Familiarity with IAM platforms (e.g. Entra ID, SailPoint, CyberArk) is a plus.
- Knowledge of regulatory frameworks including NIS2, GDPR, and ISO 27001.
- Excellent analytical, documentation, and stakeholder engagement skills.
- Fluent in English; Dutch and/or French isa plus.
