Regions Bank
Identity and Access Management (IAM) Analyst
Regions Bank, Atlanta, Georgia, United States, 30383
Identity and Access Management (IAM) Analyst
At Regions, we strive to safeguard private and personally identifiable information through authorized evaluation of qualifications. This role analyzes, identifies, and documents cybersecurity risks with a proactive approach, applying core technology and cybersecurity principles and industry best practices to investigate, remediate, and/or escalate as needed.
Responsibilities
Analyze and respond to cyber threats within various security tools according to documented procedures
Collaborate with Cyber Security/Technology departments and standard owners to document and communicate security risks
Support a feedback loop to improve the precision and accuracy of analysis
Review and understand Policies, Standards, and Procedures to improve process flows
Perform threat hunting, participate in tabletop exercises, and assist in Incident Response on a rotational basis
Maintain meticulous records of work, including root cause analysis, indicators of compromise, remediation steps, timeline of events, and impact assessment
Stay current on global cybersecurity threat trends
Collaborate with cybersecurity teams to document security posture and assess environment for IOCs and gaps
Participate in and document various security assessments (e.g., Security Architecture Reviews, Red Team, Purple Team, tabletop exercises) as needed
Analyze software for violations of Regions Cyber Security standards
Act as a coach and mentor to junior analysts
May lead special projects
Qualifications
High School Diploma or GED and eight (8) years of related post-secondary education and/or experience in Information Security or Information Technology
Minimum of two (2) relevant certifications in Information Security or the ability to obtain relevant certifications within twelve months of start date (e.g., CompTIA Network+/Security+/CySA+, EC-Council CEH, Cisco CCNA/CCNA-Security, GIAC GSEC)
Willingness and availability to work on a pre-determined shift and rotational on-call
Preferences
Minimum of one (1) Intermediate to Advanced AWS or Azure Architect/Administrator and/or Security specialty certification
Advanced Incident Response, Cyber Leadership, Penetration Testing certification – GCIH, GSOM, GPEN, CISSP, CISM, OSCP
Prior experience in a Security Operations Center (SOC) environment
Experience developing use cases for SOC from threat hunting to investigation playbooks and response procedures
Understanding of MITRE ATT&CK Framework and Cyberattack Kill Chain and how these frameworks identify gaps and orient analysts
Skills And Competencies
Self-starter with initiative and drive for continuous improvement
Team-oriented with focus on collective success
Advanced understanding of information security principles, controls, and technologies
Strong organizational, research, analytical and problem-solving skills
Excellent writing and verbal communication skills
Familiarity with malware analysis, forensics, incident response, intrusion detection, network analysis, pentesting, vulnerability scanning, compliance, audit, or threat intelligence
Additional Responsibilities For This Opportunity
Partner with Regions teams to gather requirements for application onboarding to Sailpoint IIQ
Lead meetings to gather requirements and create onboarding and provisioning documentation
Analyze RBAC for Sailpoint and define/modify roles
Troubleshoot connection and provisioning failures and determine root cause
Coordinate with IGA team members to meet timelines
May serve as an SME and provide support for the IGA solution
Additional Preferences
Sailpoint IIQ or Sailpoint Identity Security Cloud experience
Experience with RBAC and automated provisioning/deprovisioning in Sailpoint
Experience with ServiceNow
Experience with JIRA
Experience with SQL
Location, Schedule and Working Arrangements This position is intended to be onsite, with regular in-office days. Associates should be within a reasonable driving distance to a Regions location. The manager will set the work schedule, including in-office expectations. Regions will not provide relocation assistance for this position.
Position Type Full time
Compensation and Benefits Pay ranges are job-specific and used as a point-of-market reference. Minimum/Median targets and incentive details are provided where applicable. The target information below is based on the Metropolitan Statistical Area Market Range for the location and level of the position. This job is not incentive eligible.
Minimum Job Range Target: $96,641.60 USD
Median: $125,240.00 USD
Benefits Information: Regions offers a benefits package that is flexible and comprehensive. Benefits include Paid Vacation/Sick Time, 401K with Company Match, Medical/Dental/Vision, Disability, HSA/FSAs, Life Insurance, Parental Leave, Employee Assistance Program, and Volunteer Programs.
Location: Riverchase Operations Center, Hoover, Alabama
Equal Opportunity Employer Equal Opportunity Employer/including Disabled/Veterans. Job applications are accepted electronically for a minimum of five business days from posting. Higher-volume positions may remain open longer due to business need and may be closed at any time at the company’s discretion.
Referrals increase your chances of interviewing at Regions Bank by 2x
Job postings and salary details are for informational purposes and may be updated. This description preserves original job information and context without introducing new claims.
Note: This description is refined for formatting quality and does not alter the original job information.
#J-18808-Ljbffr
Responsibilities
Analyze and respond to cyber threats within various security tools according to documented procedures
Collaborate with Cyber Security/Technology departments and standard owners to document and communicate security risks
Support a feedback loop to improve the precision and accuracy of analysis
Review and understand Policies, Standards, and Procedures to improve process flows
Perform threat hunting, participate in tabletop exercises, and assist in Incident Response on a rotational basis
Maintain meticulous records of work, including root cause analysis, indicators of compromise, remediation steps, timeline of events, and impact assessment
Stay current on global cybersecurity threat trends
Collaborate with cybersecurity teams to document security posture and assess environment for IOCs and gaps
Participate in and document various security assessments (e.g., Security Architecture Reviews, Red Team, Purple Team, tabletop exercises) as needed
Analyze software for violations of Regions Cyber Security standards
Act as a coach and mentor to junior analysts
May lead special projects
Qualifications
High School Diploma or GED and eight (8) years of related post-secondary education and/or experience in Information Security or Information Technology
Minimum of two (2) relevant certifications in Information Security or the ability to obtain relevant certifications within twelve months of start date (e.g., CompTIA Network+/Security+/CySA+, EC-Council CEH, Cisco CCNA/CCNA-Security, GIAC GSEC)
Willingness and availability to work on a pre-determined shift and rotational on-call
Preferences
Minimum of one (1) Intermediate to Advanced AWS or Azure Architect/Administrator and/or Security specialty certification
Advanced Incident Response, Cyber Leadership, Penetration Testing certification – GCIH, GSOM, GPEN, CISSP, CISM, OSCP
Prior experience in a Security Operations Center (SOC) environment
Experience developing use cases for SOC from threat hunting to investigation playbooks and response procedures
Understanding of MITRE ATT&CK Framework and Cyberattack Kill Chain and how these frameworks identify gaps and orient analysts
Skills And Competencies
Self-starter with initiative and drive for continuous improvement
Team-oriented with focus on collective success
Advanced understanding of information security principles, controls, and technologies
Strong organizational, research, analytical and problem-solving skills
Excellent writing and verbal communication skills
Familiarity with malware analysis, forensics, incident response, intrusion detection, network analysis, pentesting, vulnerability scanning, compliance, audit, or threat intelligence
Additional Responsibilities For This Opportunity
Partner with Regions teams to gather requirements for application onboarding to Sailpoint IIQ
Lead meetings to gather requirements and create onboarding and provisioning documentation
Analyze RBAC for Sailpoint and define/modify roles
Troubleshoot connection and provisioning failures and determine root cause
Coordinate with IGA team members to meet timelines
May serve as an SME and provide support for the IGA solution
Additional Preferences
Sailpoint IIQ or Sailpoint Identity Security Cloud experience
Experience with RBAC and automated provisioning/deprovisioning in Sailpoint
Experience with ServiceNow
Experience with JIRA
Experience with SQL
Location, Schedule and Working Arrangements This position is intended to be onsite, with regular in-office days. Associates should be within a reasonable driving distance to a Regions location. The manager will set the work schedule, including in-office expectations. Regions will not provide relocation assistance for this position.
Position Type Full time
Compensation and Benefits Pay ranges are job-specific and used as a point-of-market reference. Minimum/Median targets and incentive details are provided where applicable. The target information below is based on the Metropolitan Statistical Area Market Range for the location and level of the position. This job is not incentive eligible.
Minimum Job Range Target: $96,641.60 USD
Median: $125,240.00 USD
Benefits Information: Regions offers a benefits package that is flexible and comprehensive. Benefits include Paid Vacation/Sick Time, 401K with Company Match, Medical/Dental/Vision, Disability, HSA/FSAs, Life Insurance, Parental Leave, Employee Assistance Program, and Volunteer Programs.
Location: Riverchase Operations Center, Hoover, Alabama
Equal Opportunity Employer Equal Opportunity Employer/including Disabled/Veterans. Job applications are accepted electronically for a minimum of five business days from posting. Higher-volume positions may remain open longer due to business need and may be closed at any time at the company’s discretion.
Referrals increase your chances of interviewing at Regions Bank by 2x
Job postings and salary details are for informational purposes and may be updated. This description preserves original job information and context without introducing new claims.
Note: This description is refined for formatting quality and does not alter the original job information.
#J-18808-Ljbffr