26 ago
|
Nexthink
|
Madrid
Company Description
We are looking for an IAM and Access Control Lead to drive the identity strategy and operational excellence of Nexthink's corporate identity perimeter. This role leads a small team of senior engineers responsible for the platforms, policies and engineering standards that govern how every employee, contractor, service account and non-human identity gains, uses, and loses access across Nexthink's corporate environment.
You will partner with the CISO function on policy and standards, and with IT on operational delivery, owning the engineering execution end to end.
Key Responsibilities
IAM Governance & Strategy
- Define and own the IAM governance model - principles, standards, decision rights, and operating cadence -as the durable internal foundation for the program.
- Develop and maintain the multi-year IAM roadmap, sequencing capability build against business risk and investor expectations.- Define role-based access control (RBAC) governance standards and the target access model across the corporate estate.
- Scope, commission,
and steer external specialist engagements (e.g. role mining, access-model optimization), retaining internal ownership of outcomes and standards.
Access Reviews & Certification
- Design and operate the enterprise access review and certification framework - periodic, risk-based, and fully evidenced.- Establish and operate quarterly privileged access reviews; drive standing admin toward zero for all in-scope environments.
Business Application Access & Segregation of Duties- Lead Segregation of Duties (SoD) analysis: define the conflict ruleset, identify and remediate SoD conflicts, and operate ongoing monitoring.
- Support SOX, ISO 27001, and SOC 2 audit readiness with documented controls, evidence, and remediation tracking; serve as IAM’s primary interface to Internal Audit.
- Lead NetSuite role design and Salesforce permission rationalization to align entitlements with least privilege and clean role definitions.
Identi
📌 Senior Iam Lead (Madrid)
🏢 Nexthink
📍 Madrid