Security Engineer Analyst
Encora · Kuala Lumpur
Role Summary: The IAM Operations & Access Review Support Analyst is responsible for executing day-to-day IAM operational activities, supporting access reviews, identity lifecycle management, privileged access administration, and access governance processes. The role ensures timely provisioning, deprovisioning, reconciliation, and certification activities across the organization.
Key Responsibilities:
Identity Lifecycle Management
- Execute Joiner, Mover, Leaver (JML) processes in accordance with approved procedures.
- Provision, modify, and revoke user access across enterprise applications and platforms.
- Ensure timely onboarding and offboarding of employees, contractors, and third parties.
Privileged Access Management (PAM)
- Administer privileged accounts and access requests.
- Perform credential reconciliations and privileged account reviews.
- Support privileged access certifications and monitoring activities.
- Investigate and remediate orphaned or dormant privileged accounts.
Access Reviews & Recertification
- Support execution of periodic user access reviews and certification campaigns.
- Coordinate with application owners and business managers on access attestations.
- Follow up on overdue certifications and remediation actions.
- Generate certification reports and evidence for compliance purposes.
Operational Monitoring & Reporting
- Monitor provisioning SLA performance and operational metrics.
- Support exception management and issue escalation.
- Maintain accurate operational records and audit trails.
Audit & Compliance Support
- Provide operational evidence for audits and compliance assessments.
- Support closure of audit findings through remediation actions.
- Maintain documentation and records of access management activities.
Required Skills & Experience
- 3–5 years of experience in IAM Operations, Access Administration, Service Management, or Security Operations.
- Experience with Identity Governance & Administration (IGA) and PAM solutions.
- Understanding of JML processes, Active Directory, LDAP, and access certification.
- Strong attention to detail and process discipline.
Preferred Qualifications
- Experience with SailPoint, Saviynt, Entra ID, CyberArk, BeyondTrust, Okta, or similar IAM platforms.
- ITIL Foundation, Security+, or equivalent certifications.