Security Business Analyst-IAM

Overview

We are seeking two experienced Security Business Analysts-IAM to support a Secrets & Credential Management initiative. The role focuses on enterprise-wide analysis of secret management practices, identification and documentation of credentials, assessment of security and control gaps, and definition of requirements for centralized secrets lifecycle management.

Key Responsibilities

• Conduct end-to-end analysis of current secret and credential handling across applications, infrastructure, and business processes.
• Identify, classify, and assess risks associated with technical and workforce secrets.
• Detect control gaps, including hardcoded credentials, shared accounts, weak rotation practices, and lack of auditability.
• Define functional and non-functional requirements for centralized secrets management solutions.
• Support IAM/PAM-aligned governance, least privilege principles, and auditability standards.
• Facilitate workshops with technical and business stakeholders.
• Document gaps, risks, remediation plans, and implementation dependencies.
• Support evaluation of secrets management tools, including CyberArk, HashiCorp Vault, and Azure/AWS/GCP Secret Managers.
• Ensure delivery of audit-ready, governance-level documentation and deliverables.

Requirements

• Minimum 5 years of Business Analysis and/or security analysis experience.
• At least 2 years of experience working on IAM projects.
• Strong knowledge of IAM, PAM, least privilege principles, auditability, and credential types.
• Experience in security control assessment and requirements engineering.
• Strong documentation, communication, and stakeholder management skills.
• Professional proficiency in English.
• Experience working in complex and regulated environments.
• Knowledge of ISO 27001, NIST, and CIS frameworks is considered an advantage.

Language Requirements:

• English-Professional
• Polish-Professional

Job Type:

Full-time, remote (Contract)

Note: No visa sponsorship will be provided and only shortlisted candidates will be notified.