Lead - Risk and Compliance

Skill : CIAM risk and CIAM compliance

Candidate Expectations
Total Experience 5+ years and Relevant Experience - 3+ years
Candidate Location - Anywhere
Skills for Senior
CIAM Risk Customer Identity and Access Management (CIAM), Authentication and MFA,
Identity Proofing, Risk Assessment, Regulatory Compliance
Skills for Senior CIAM
Compliance CIAM, IAM, MFA Controls, Compliance reviews, Evidence validation, Cybersecurity governance

Education and Certification/ Qualification - Any Bachelor s Degree
Specific Remarks - Distance education not accepted
Certification for Senior CIAM
Risk - CISSP / CISM / CRISC / CCSP
Certification for Senior CIAM
Compliance CISSP (Strong Preference) / CISM, CRISC, CCSP

Detailed Job Description
Senior CIAM Risk

Key Responsibilities

• Standards Governance
• Maintain and update CIAM Standards and Technical Specifications.
• Map standards to regulatory, industry and enterprise requirements.
• Maintain CIAM control libraries and requirement inventories.
• Perform gap assessments against emerging industry practices.
• Solution Compliance Assessments
• Assess projects, applications and platform changes against CIAM requirements.
• Determine:
• Applicable CIAM controls
• Compliance status
• Control gaps
• Required remediation
• Required compensating controls
• Risk acceptance requirements
• Multi-Risk Assessment Support
• Perform assessments through multiple risk lenses including:
• Customer Identity & Access Management
• Fraud Risk
• AML Risk
• Privacy Risk
• Cybersecurity Risk
• Operational Risk
• Regulatory Compliance
• Risk Governance & Advisory
• Draft risk opinions.
• Draft governance memorandums.
• Draft executive decision papers.
• Produce standards interpretations.
• Support committee submissions.Support audit and regulatory responses.

Mandatory Skills

• Customer Identity and Access Management (CIAM)
• Authentication and MFA
• Identity Proofing
• Federation / SSO/ OAuth / OIDC
• Risk Assessment
• Governance and Controls
• Regulatory Compliance
• Strong verbal communication
• Executive writing and memo preparation
• Deliverables
• Compliance Assessments
• Risk Position Papers
• Control Applicability
• Decisions
• Standard Interpretations
• Executive Memorandums
• Governance Presentations
• Exception AssessmentsDetailed Job DescriptionSenior CIAM ComplianceKey Responsibilities
• Control Reviews
• Perform CIAM control assessments.
• Review application implementations.
• Assess customer authentication controls.
• Assess identity proofing controls.
• Assess MFA implementations.
• Assess federated identity implementations.
• Assess customer account recovery processes.
• Evidence Validation
• Review evidence submissions to determine:
• Sufficiency
• Accuracy
• Completeness
• Traceability
• Adherence to CIAM requirements
• Control Monitoring
• Support ongoing governance activities including:
• MFA compliance monitoring
• CIAM control compliance monitoring
• Exception validation
• Change impact reviews
• Remediation tracking
• Testing Support
• Support:
• Regulatory Compliance Management (RCM)
• pRCSA / E2E RCSA activities
• 2LOD testing support
• Control walkthroughs
• Audit preparation.

Mandatory Skills

• CIAM
• IAM
• MFA controls
• Authentication technologies
• Control testing
• Compliance reviews
• Evidence validation
• Cybersecurity governance
• Risk management
• Deliverables
• Control Assessments
• Compliance Reviews
• Evidence Validation
• Reports
• Monitoring Results
• Gap Assessments
• Remediation
• Recommendations

Additional Requirements: Immediate to 45 days
Looking for candidates who are experts in CIAM Risk or CIAM Compliance, or both.