Job Description

Identity and Access Management Analyst (IAM)
Luton/Hybrid
PCD300256

About the organisation:
We are the organisation - a FTSE-100 listed, £multi-billion low-cost airline that serves tens of millions of customers every single year. If you're reading this, you have probably already been an the organisation customer, and you'll know that there is no more iconic (or Orange!) travel brand in Europe.
We fly more than 1,207 routes, connecting 38 countries across Europe, and employ more than 19,000 colleagues. We're on a mission to make low-cost travel easy - and whatever your role here, you'll connect millions of people to what they love using Europe's best airline network, great value fares, and friendly service.
JOB PURPOSE
The Identity and Access Management Analyst role is a core role in the Identity and Access Management Platform Team at the organisation. This role is critical in protecting the organisation data and systems and responsible for ensuring access controls are correctly implemented. This role ensures that appropriate access is provided to maintain compliance in line with policies and regulations.
JOB ACCOUNTABILITIES
To implement Access Controls to protect systems and data at the organisation:
• Ensure all employees, contractors, and third parties are granted only the access they need based on their job roles, enforcing the principle of least privilege
• Monitor, audit, and manage who has access to what systems and data.

We offer:
• Competitive base salary
• 20% bonus potential.
• 25 days holiday, pension scheme, life assurance, and a flexible benefits package.
• Discounted staff travel scheme for friends and family
• Annual credit for discount on the organisation holidays
• 'Work Away' scheme, allowing you to work abroad for 30 days a year
• Electric vehicle lease salary sacrifice scheme
Location & Hours of Work
We operate a hybrid working policy of 40%-60% of the month spent with colleagues.
We look forward to your application and the possibility of you flying high with our team!

To maintain Compliance and Security:
• Drive, measure and report on process adherence and access controls to ensure compliance in line with internal policies and external regulations (e.g., GDPR, PCI DSS V4, NIS-D),
• Identify, analyse and respond to identity-related security risks or anomalies in collaboration with IT and Security teams.

To conduct regular Access Reviews, Certifications and Audits:
• Conduct regular reviews of user access to ensure continued appropriateness of access in line with internal policy,
• Prepare evidence and reports for internal audits or regulatory compliance audits,
• Participate in internal and external audit meetings and interviews.
To support with administration and continuous improvements of Identity and Access Management:
• Automation of IAM processes, self-service access requests in the Identity tools such as identity and access management platform and identity and access management platform and Privileged Access Management tools, such as privileged and identity governance platform,
• Review, and approve IAM related service requests, produce regular reporting and dashboards on IAM related services.
Collaborate with internal and external teams to effectively embed IAM governance and processes across the organisation:
• Work with HR, application teams, IT, architecture, security, compliance and business units to align access with the organisation needs and processes,
• Support and address issues with Joiners, Movers and Leavers processes, Identity Governance and Administration workflows related to onboarding/offboarding.
Requirements of the Role
KEY SKILLS REQUIRED
Below are the key technical skills required by an Identity and Access Management Analyst:
• Demonstrable experience in IAM, security, or system administration,
• Strong knowledge of Identity lifecycle management, access provisioning/de-provisioning, and authentication methods,
• Experience with IAM systems: identity and access management platform, privileged and identity governance platform, or similar,
• Strong experience in spreadsheet software and business intelligence tooling or similar tools for reporting purposes,
• Understanding of security best practices (least privilege, SSO, RBAC, MFA, Zero Trust), regulatory compliance requirements (PCI DSS V4) and NIST Cyber Security Framework V2.0,
• Strong analytical, troubleshooting, and documentation skills, including process mapping,
• Strong communication and stakeholder management skills with external teams in IT and business.

What you'll get in return:
At the organisation, we pride ourselves on a vibrant and inclusive workplace culture that supports and rewards innovation and excellence.

Application Process:
Interested candidates should apply through our careers portal.

Reasonable Adjustments: