Senior Analyst, Access Control Design (IAM)

Job description

Job Posting End Date

Worker Type: Permanent

OVERVIEW

The Senior Analys t , Access Control Design is responsible for designing and documenting an enterprise-wide Access Control Framework that upholds key security principles — including Least Privilege, Need to Know, Role-Based Access Control (RBAC), and Segregation of Duties ( SoD ). The role ensures that access rights across critical systems are secure, compliant, and aligned with business functions. The Senior Analyst will lead stakeholder engagement sessions to capture requirements, design functional roles, and deliver a comprehensive Access Control Design Document (ACDD) supporting regulatory and audit objectives .

KEY RESPONSIBILITIES

Develop and maintain Access Control Design Documents covering access models, roles, entitlements, and control objectives . Apply key access control principles — Least Privilege, Need to Know, RBAC, SoD , and Access Lifecycle Management — in all design activities. Conduct stakeholder workshops with business, IT, and risk teams to identify access needs, validate designs, and obtain approvals. Collaborate with business and IT stakeholders to analyse access r equirements .

Translate/implement approved access control designs into technical configurations within SailPoint and other IAM platforms. Maintain strong governance, communication, and coordination across multiple program streams to ensure consistent and sustainable access control implementation. Engage with business, compliance, and IT stakeholders to gather and document SoD and access control requirements. Design the SoD Mat rix, defining toxic combinations, risk matrices, and mitigating controls.

Configure and implement SoD policies, rules within SailPoint IdentityIQ . Deliver comprehensive documentation covering design, implementation, and governance processes. Provide training and knowledge transfer to internal teams for ongoing SoD management.

YOUR SKILLS & EXPERIENCE

Experience with the banking domain and how business process works in financial institutions. Understanding of IAM principles and disciplines such as audit/governance. Understanding of SOD terminologies. Experience in IAM design/consulting work. NAB risk management tools like the GRACE governance, risk and compliance platform. Support/maintenance experience in SailPoint identity IQ/GIT Familiar with software development process .

THE

BENEFITS

AND PERKS We appreciate and reward our colleagues who do great work every day – from excelling for our customers, to taking ownership of an issue to get it resolved. Here’s how we support our people with a range of exclusive benefits.

• Generous compensation and benefit package Attractive salary 20-day paid annual leave and 7-day paid sick leave 13th month salary and Annual Performance Bonus Premium healthcare for yourself and family members Monthly allowance for team activities Premium welcome kit and occasional gifts of appreciation Extra benefits on your work anniversary
• Exciting career and development opportunities Large scale products with modern technologies in banking domain Clear roadmap for career advancement in both technical and leadership pathways Access to digital learning platform such as Udemy Consistent and high-quality leadership training through the Distinctive Leadership program (DLP) Specialist capabilities and accreditations in key skill areas such as Cloud Engineering, Digital, Data, Security and SREs (Site reliability engineers) Sponsored English course with native teachers Opportunity for training in Australia
• Professional and engaging working environment Hybrid working model and excellent work-life balance State-of-the-art & modern Agile office Food and beverages in the office pantry Employee Assistance Program to improve your physical and mental health Annual team activities and company events A solid and talented team behind you – great people who love what they do A DIVERSE AND INCLUSIVE WORKPLACE WORKS BETTER FOR EVERYONE We know that our people make us who we are.

That's why we have built a culture of respect – where everyone feels valued and appreciated for being their true authentic selves at NAB.

With our focus on inclusion and diversity, and in partnership with our Employee Resource Groups, NAB is a place where First Nations colleagues, colleagues of all genders, sexualities and ages, carers and colleagues with disability, and colleagues from all cultures, races and religions , have the opportunity to thrive, connect and grow. We are intent on providing an environment where you can work your way. Ask about our many flexible work options and please let us know if we can provide any adjustments throughout the recruitment process.

CLOUD-FIRST NAB is undergoing an exciting "Cloud First" technology transformation by taking advantage of the latest tools and techniques used by leading technology and digital companies globally. But it’s not just about the Tech, we are also investing heavily in our people, so if you have an appetite to learn, grow and elevate others around you, this is the place for you! It's more than just a career at NAB!

We believe in people with people and dreams, and we want you to achieve your aspirations. More than just a career, NAB Vietnam offers you a flexibility to balance your work - life, the opportunity to grow as professionals, people and a complete set of well-being offerings. If you have an appetite to learn, grow and elevate others around you, this is the place for you. IT'S MORE THAN MONEY We naturally also provide a very competitive remuneration package but a career with us is about a lot more than money.

We believe in people with ideas and dreams, and we want you to achieve your aspirations. We will work together to deliver exceptional products and outcomes that push the limits of our own aspirations. Our passion for creating value and exceeding our customers' expectations means we are constantly striving to redefine our standards of excellence. You will have our backing to develop and our encouragement to explore, realize and reach your full potential.