The Senior Privileged Access Management Analyst (PAM Analyst) will work as a member of the information security team and will provide operational support for the successful implementation and standardization of the organization’s PAM program. This individual will be responsible for onboarding accounts to our privileged access management system, audit remediation, legacy access systems cleanup and reporting. The position will work with key partners, engineers, risk and controls, audit and other business units and serve as a liaison in determining the appropriate use cases for privilege access. The person in this role will also advise, and at times, oversee these activities and look for opportunities in eliminating manual work through various means: automation, security posture reporting, self-service, and partner engagements.

You will

Serve as an SME (Subject Matter Expert) for Privileged Identity Management domain.
Assist with access requests and provide guidance to end users and user administration team.
Create and manage various privileged access report, identifies trends and improvement opportunities.
Assist in the daily operations to support the CyberArk PAM platform.
Collect, analyze, and represent complex data in meaningful reporting and metrics.
Develop and maintain end-user documentation and provide relevant training.
Participate in project planning and activities across multiple efforts.
Serve as a visible champion of access management and help communicate standard processes.
Design, implement, perform, and continuously optimize/improve robust processes, procedures, and controls.
Support the team’s leader in delegated responsibilities as appropriate.
Support internal and external audits and risk assessments.

You have

Degree in Computer Science or a related field and 5 years' work experience.
Proficiency of Identity and Access Management and Privileged Access Management concepts and standard processes, including least privilege, secondary and firecall IDs.
Solid understanding of SOX, SOC, MAR and NYDFS compliance standards.
Solid background and experience with Excel pivot tables and graphic chart for data analysis, tracking and reporting.
On-boarding and day to day operations experience with CyberArk and SailPoint.
Understanding of security risk and implementation of mitigating controls.
Practical knowledge of IT platforms including Active Directory, LDAP, TIM/TAM, Mainframe, Databases, Unix and others.
Knowledge of cloud environments including AWS and Office 365.
Experience developing and continuously improving processes, procedures, and controls.
Proactive mentality and ability to work independently on numerous projects/activities at the same time with minimal oversight.
Experience working closely with IT engineers to design and implement solutions.
Strong written and verbal communication and interpersonal skills.
Excellent customer focus to support a positive customer service climate.
Excellent analytical skills to properly plan, test, and fully implement security related concepts.

Salary Range

$91,260.00 - $149,925.00

The salary range reflected above is a good faith estimate of base pay for the primary location of the position. The salary for this position ultimately will be determined based on the education, experience, knowledge, and abilities of the successful candidate. In addition to salary, this role may also be eligible for annual, sales, or other incentive compensation.

Our Promise

At Guardian, you’ll have the support and flexibility to achieve your professional and personal goals. Through skill-building, leadership development and philanthropic opportunities, we provide opportunities to build communities and grow your career, surrounded by diverse colleagues with high ethical standards.

Inspire Well-Being

As part of Guardian’s Purpose – to inspire well-being – we are committed to offering contemporary, supportive, flexible, and inclusive benefits and resources to our colleagues.

Health Care

Choice of [high deductible/copay] medical plans* with prescription drugs, including coverage for fertility and transgender inclusive benefits
Dental plan
Vision plan
Health care accounts – flexible spending, health reimbursement, and health savings accounts
Critical illness insurance

Life and Disability Insurance

Company-paid Life and Disability insurance plus voluntary supplemental coverage
Accident insurance

Retirement and Financial

401(k) retirement plan with a company match, plus an annual age/service-based Company contribution and an annual profit-sharing contribution, if applicable
Complimentary 1:1 financial guidance with a licensed Fidelity representative

Time Off and Remote Work

Flexible work arrangements (part in-person/part remote)
Unlimited paid time off for most roles plus time off for volunteering, jury duty, voting, and bereavement
Personal holidays for colleagues to use in recognition of religious, cultural, or civic days
Paid parental leave and paid family and medical leave policies

Emotional Well-being and Work-Life

Emotional well-being, mental health, and work/life resources powered by Spring Health
Wellness programs, including fitness program and equipment reimbursement
Child, adult, and elder back-up care support through Bright Horizons
Adoption assistance
College planning
Tuition reimbursement
Student loan assistance
Commuter benefits in select metropolitan areas

Equity & Inclusion

Opportunities to build inclusive and meaningful connections through involvement in colleague-led affinity groups:

Employee Resource Groups:
Colleague Connection Committees
Community Involvement Committees

A culture that encourages colleagues to bring their authentic selves to work

Voluntary self-ID
Pronunciation and phonetic spelling of names

Benefits apply to full-time eligible employees. Interns are not eligible for most Company benefits.

Equal Employment Opportunity

Guardian is an equal opportunity employer. All qualified applicants will be considered for employment without regard to age, race, color, creed, religion, sex, affectional or sexual orientation, national origin, ancestry, marital status, disability, military or veteran status, or any other classification protected by applicable law.

Accommodations

Guardian is committed to providing access, equal opportunity and reasonable accommodation for individuals with disabilities in employment, its services, programs, and activities. Guardian also provides reasonable accommodations to qualified job applicants (and employees) to accommodate the individual's known limitations related to pregnancy, childbirth, or related medical conditions, unless doing so would create an undue hardship. If reasonable accommodation is needed to participate in the job application or interview process, to perform essential job functions, and/or to receive other benefits and privileges of employment, please contact applicant_accommodation@glic.com.

Current Guardian Colleagues: Please apply through the internal Jobs Hub in Workday.

Guardian Life jobs

Senior Privileged Access Management Analyst, Cyber Security