Associate, Cyber Security

The Position

Summary

The Cyber Associate, IAM Operations supports the secure and efficient administration of workforce identities and access across Amplify Health. The role executes identity lifecycle, access provisioning, governance, compliance, and operational support activities in line with approved controls and service levels. Working closely with application, platform, HR, and business teams, the position helps maintain accurate access, complete audit evidence, and effective least-privilege controls while contributing to continuous improvement across IAM operations.

Responsibilities

1. Identity Lifecycle Management

• Perform joiner, mover, and leaver activities in accordance with approved IAM processes, control requirements, and agreed service levels.
• Support end-to-end identity lifecycle management for workforce identities, including onboarding, role changes, transfers, and offboarding.
• Execute access provisioning and deprovisioning requests across approved platforms, applications, and infrastructure services.
• Maintain Active Directory group memberships and ensure access assignments are accurate, approved, and aligned to business requirements.
• Ensure identity records, access attributes, and operational evidence are complete and traceable for audit and compliance purposes.
• Monitor IAM operational queues and ensure access requests, incidents, and tasks are actioned accurately and within agreed timelines.

1. Access Governance & Compliance

• Support role-based access control (RBAC) administration and identity compliance activities across business and technology platforms.
• Administer entitlement management processes, ensuring access is granted based on approved access models, policies, and business justification.
• Support Azure RBAC and cloud permission assignments, ensuring privileged and platform access is appropriately approved, documented, and reviewed.
• Contribute to the design, maintenance, and enforcement of access models, policies, and standard operating procedures.
• Assist in identifying segregation of duties conflicts and access control gaps, escalating risks and exceptions for review and remediation.
• Support user access reviews, certification campaigns, and least-privilege remediation activities to strengthen access governance and audit readiness.

1. Operational Support & Continuous Improvement

• Maintain IAM documentation, SOPs, runbooks, and evidence repositories to support consistent operations and audit requirements.
• Support access exception tracking, remediation follow-ups, and periodic control reporting for management and compliance stakeholders.
• Collaborate with application, platform, HR, and business teams to resolve identity and access-related issues.
• Identify opportunities to standardise, automate, or improve IAM operational processes and access governance controls.

Candidate Profile

Experience and Qualifications

• 0–3 years of experience in IAM operations, identity administration, access governance, or related cybersecurity operations.
• Hands-on experience with joiner, mover, and leaver processes, access provisioning, deprovisioning, and user access reviews.
• Working knowledge of Active Directory, Microsoft Entra ID, Azure RBAC, AD groups, service accounts, and cloud or platform access controls.
• Understanding of RBAC, least privilege, segregation of duties, entitlement management, and identity compliance principles.
• Strong attention to detail, documentation discipline, and the ability to maintain accurate access records and audit evidence.
• Relevant experience or training in IAM, Azure, ITSM, or cybersecurity are advantageous.

Competencies & Core Characteristics:

We are seeking a professional who embodies the following competencies and characteristics essential for success in our scale-up environment:

The successful candidate will combine disciplined IAM execution with strong collaboration, sound judgement, and a continuous-improvement mindset. The following competencies are essential for delivering accurate, timely, and control-aligned IAM operations in Amplify Health’s scale-up environment:

• IAM Technical Foundation: Applies working knowledge of identity lifecycle processes, Active Directory, Microsoft Entra ID, Azure RBAC, access controls, and service accounts to complete operational activities accurately and securely. Understands when to escalate complex, privileged, or non-standard access scenarios.
• Control and Compliance Discipline: Follows approved IAM processes, validates authorisations, and maintains complete, traceable evidence. Applies least-privilege, RBAC, segregation-of-duties, and entitlement-management principles consistently.
• Detail and Execution Excellence: Manages operational queues with accuracy, prioritises work against agreed service levels, and maintains high-quality identity and access records. Identifies discrepancies early and follows through to resolution.
• Cross-Functional Collaboration: Works effectively with HR, application, platform, compliance, and business stakeholders to clarify requirements and resolve access issues. Communicates progress, risks, exceptions, and required actions clearly and professionally.
• Continuous Improvement Mindset: Looks for practical opportunities to standardise, automate, and strengthen IAM processes, documentation, and controls. Learns from incidents, recurring requests, and review findings to improve operational outcomes.