RBAC Specialist

Job Role - RBAC Specialist

Location – India/Remote

Job Type - Full-time

Experience Level: 3+ years of dedicated experience focusing on role engineering, role mining, SoD and RBAC design.

Project Overview:

We are seeking an experienced IAM Consultant to lead a targeted Role Discovery and RBAC (Role-Based Access Control) Matrix initiative in a highly regulated banking environment, ensuring precise access alignment is critical for operational efficiency, fraud prevention, and regulatory compliance (e.g., SAMA, NCA, CBUAE, SCA, VARA, GDPR, PCI-DSS).

The consultant will analyze current access patterns across key financial and operational applications, design a scalable RBAC framework, and deliver a comprehensive, audit-ready RBAC Matrix.

Key Responsibilities:

1. Role Discovery & Analysis

• Conduct interviews and workshops with business unit leads, application owners, and risk teams to understand business functions and operational workflows.
• Analyze existing user access data, entitlements, and group memberships to identify patterns, redundancies, and birthright access requirements.
• Perform Segregation of Duties (SoD) risk analysis to ensure no single role contains toxic combinations of access (e.g., creating vs. approving a wire transfer).

2. RBAC Architecture & Matrix Design

• Define and map out Business Roles (what a person does) to Technical Roles (what system entitlements they need).
• Build a comprehensive, multi-dimensional RBAC Matrix that clearly aligns job functions with specific application permissions.
• Establish clear naming conventions and structural rules for roles that align with modern IAM governance frameworks.

3. Documentation & Handover

• Create formal documentation outlining the role engineering methodology, discovery findings, and assumptions made during the project.
• Document a governance framework/process for how the new RBAC matrix should be maintained, reviewed, and updated as business needs to evolve.
• Provide an implementation-ready roadmap for our internal engineering/IAM team to ingest the matrix into our IAM/IGA platforms.
• A standard operating procedure (SOP) detailing how to request new roles, modify existing ones, and perform periodic access reviews.

Required Skills & Qualifications:

Banking/Finance Expertise: Strong understanding of banking applications, financial workflows, and strict regulatory frameworks (e.g., SAMA, NCA, CBUAE, SCA, VARA, GDPR, PCI-DSS).

Technical Proficiency:

• Advanced data manipulation skills (Expert-level Excel/PowerBI, or Python/SQL) to parse and clean massive entitlement dumps.

Soft Skills: Excellent stakeholder management and communication skills. You must be comfortable translating technical system entitlements into business logic when talking to non-technical business leaders.