PAM Specialist

About the Role

Conduct an IT Operations Privileged Access Management (PAM) Audit focusing on access governance, operational controls, monitoring, and compliance. The generated report should include key controls such as least privilege, MFA, privileged session monitoring, password vaulting, periodic access reviews, and audit logging.

Design and develop enterprise cyber security strategy and architecture. Understand security requirements by evaluating business strategies and conducting system security vulnerability and risk analyses. Identify risks associated with business processes, operations, information security programs, and technology projects.

Responsibilities

• Bring best practices to rollout for:
  • Governance & Policy
  • Privileged Account Inventory
  • Access Provisioning & Reviews
  • Authentication & Elevation Controls
  • Credential Vault & Secrets Management
  • Session Monitoring & Logging
  • Operational Controls
  • Compliance & Reporting (regular audits, compliance reviews, and remediation activities)
• Identify and communicate current and emerging security threats and design security architecture elements to mitigate threats.
• Identify security design gaps in existing and proposed architectures and recommend changes or enhancements.
• Provide product best-fit analysis to ensure end-to-end security covering layered security, zoning, integration aspects, API, endpoint security, data security, compliance, and regulations.
• Demonstrate experience in security assessments against NIST Frameworks, SANS, CIS, etc.
• Provide support during technical deployment, configuration, integration, and administration of security technologies.
• Demonstrate experience around ITIL or key process-oriented domains like incident management, configuration management, change management, and problem management.
• Provide assistance for disaster recovery in the event of security breaches, attacks, intrusions, and unusual, unauthorized, or illegal activity.
• Provide solutions for RFPs received from clients and ensure overall design assurance.
• Develop a direction to manage the portfolio of to-be-solutions including systems, shared infrastructure services, applications, and hardware related to cyber risk security.
• Analyze technology environment, enterprise specifics, and client requirements to set a collaboration design framework/architecture.
• Create complete RFPs depending on client needs with particular standards and technology stacks.
• Provide technical leadership to the design, development, and implementation of custom solutions through thoughtful use of modern technology.
• Define and understand current state solutions and identify improvements, options, and tradeoffs to define target state solutions.
• Articulate and sell architectural targets, recommendations, and reusable patterns, proposing investment roadmaps.
• Evaluate and recommend solutions to integrate with the overall technology ecosystem.
• Track industry and application trends and relate these to planning current and future IT needs.
• Liaise with stakeholders regarding cyber security issues and provide timely support and future recommendations.
• Assist in maintaining an information security risk register and help with internal and external audits relating to information security.
• Support audit of security best practices and implementation of security principles across the organization.
• Assist with the creation, maintenance, and delivery of cyber security awareness training to team members and customers.
• Provide training to employees on issues such as spam and unwanted or malicious emails.
• Deliver performance metrics including:
  • Customer centricity: Timely security breach solutioning, CSAT, educating and suggesting right controls.
  • Support sales team: % of proposals with Quality Index >7, timely proposal support, lead generation, number of proposals led.

Requirements

• 8-10 years of experience in a relevant role.
• Expertise in CyberArk Privileged Access Manager.

Skills

• Privileged Access Management (PAM) audit and implementation.
• Enterprise cyber security strategy and architecture development.
• Security vulnerability and risk analysis.
• Security assessments against frameworks like NIST, SANS, CIS.
• ITIL or process-oriented domains (incident, configuration, change, problem management).
• Disaster recovery and security breach response.
• RFP solutioning and design assurance.
• Stakeholder coordination and audit assistance.
• Cyber security awareness training.

Pay

The expected compensation for this role ranges from $80,000 to $158,000. Final compensation will depend on geographical location, minimum wage obligations, skills, and relevant experience.

Benefits

• Full range of medical and dental benefits options.
• Disability insurance.
• Paid time off (inclusive of sick leave).
• Other paid and unpaid leave options.