[Hiring] IAM/PAM Governance Specialist @WhiteBIT

Role Description

The future of Web3 starts with you: join us as an IAM/PAM Governance Specialist.

Qualifications

• 2+ years of experience in IAM, PAM, Identity Governance, Information Security, IT Controls, IT Audit, or a related area.
• Good understanding of Identity and Access Management concepts, including user lifecycle, role-based access control, least privilege, segregation of duties, and access recertification.
• Practical understanding of Privileged Access Management and risks associated with privileged, administrative, shared, and service accounts.
• Experience performing access reviews, privileged access reviews, or user entitlement assessments.
• Experience reviewing access controls and identifying excessive, outdated, or inappropriate permissions.
• Experience supporting internal or external audits, including evidence collection, control testing, findings follow-up, and remediation tracking.
• Ability to assess whether access controls are operating effectively and document identified gaps and recommendations.
• Experience working with system owners, administrators, Security, IT, and other stakeholders to investigate and remediate access-related issues.
• Understanding of security control frameworks and standards such as ISO 27001, NIST, SOC 2, or similar.
• Ability to work with IAM/PAM platforms, administrative consoles, access management systems, and related security tooling.
• Strong analytical and documentation skills, with attention to detail.
• Ability to independently manage assigned reviews, audits, and remediation activities.
• Good written and verbal communication skills and the ability to explain access control issues to both technical and non-technical stakeholders.

Requirements

• Hands-on experience with PAM solutions such as CyberArk, BeyondTrust, Delinea, or similar.
• Experience with Identity Governance solutions such as SailPoint, Saviynt, Microsoft Entra ID Governance, or similar.
• Experience reviewing privileged access in cloud environments such as AWS, Azure, or GCP.
• Experience with joiner, mover, and leaver processes.
• Experience with service accounts, emergency/break-glass accounts, and privileged session controls.
• Familiarity with regulatory or compliance requirements related to access management.
• Relevant certifications in information security, IAM, audit, or risk management are a plus.

Responsibilities

• Perform periodic reviews of privileged, administrative, shared, service, and other high-risk accounts across critical systems.
• Review user and administrative access to identify excessive, outdated, inappropriate, or conflicting permissions.
• Support and coordinate access recertification and entitlement review activities with system and business owners.
• Assess IAM/PAM-related security controls and verify that access management processes are operating effectively.
• Perform security and access control audits of internal systems and applications.
• Collect, validate, and maintain audit evidence related to identity, access management, and privileged access controls.
• Identify IAM/PAM control gaps, document findings, and track remediation actions through to closure.
• Monitor privileged access governance requirements, including least privilege, segregation of duties, and appropriate use of administrative accounts.
• Work with PAM and administrative consoles to review privileged access configurations, account usage, permissions, and control effectiveness.
• Support governance of service accounts, emergency/break-glass accounts, and other non-standard privileged identities.
• Collaborate with the IAM Cybersecurity team on access-related issues that require changes to IAM platforms, integrations, or technical controls.
• Work with system owners, administrators, IT, Security, and business stakeholders to investigate and remediate access-related risks.
• Support internal and external audits, compliance assessments, and security reviews related to IAM and PAM.
• Maintain and improve IAM/PAM governance documentation, procedures, control descriptions, and review records.
• Contribute to improving and automating access reviews, privileged access monitoring, evidence collection, and reporting processes.
• Provide regular reporting on access review status, identified risks, open findings, and remediation progress.

Benefits

• Immerse yourself in Crypto & Web3: Master cutting-edge technologies and become an expert in the most innovative industry.
• Work with the Fintech of the Future: Develop your skills in digital finance and shape the global market.
• Take Your Professionalism to the Next Level: Gain unique experience and be part of global transformations.
• Drive Innovations: Influence the industry and contribute to groundbreaking solutions.
• Join a Strong Team: Collaborate with top experts worldwide and grow alongside the best.
• Work-Life Balance & Well-being: Modern equipment and comfortable working conditions.
• 24 calendar days of paid leave.
• Additional days off for national holidays.