Opportunity Information
1
Bank/ Digital Bank/ Microfinance Bank/ Financial Institution
Managerial/ Experienced Professional
On Site
Karachi
The Role
To lead and govern user access administration, access reviews, and privileged access management across banking applications, infrastructure, databases, and cloud platforms, ensuring that access rights remain appropriate, controlled, and auditable, and that the bank complies with SBP requirements, ISO/ IEC 27001, PCI DSS, and Raqami’s internal Information Security policies.
•Manage user access administration and periodic access reviews across banking applications, infrastructure, databases, and cloud platforms •Ensure user provisioning, modification, and de-provisioning (joiner-mover-leaver) are completed through approved processes and within defined timelines •Review privileged, service, dormant, orphaned, and third-party accounts to ensure appropriate access •Ensure compliance with role-based access control (RBAC), least privilege, and segregation of duties (SoD) requirements •Oversee PAM controls, including privileged account onboarding, access approvals, and activity monitoring •Coordinate with IT, HR, business departments, and system owners to remediate access control deficiencies •Maintain access matrices, review evidence, and remediation trackers •Prepare periodic access review reports and escalate overdue actions and significant control gaps •Support audits and regulatory assessments related to user access management •Ensure compliance with applicable SBP requirements, ISO/ IEC 27001, PCI DSS, and internal Information Security policies
Applicants General Eligibility & Requirements
5+ years
Education, Experience and Skills Requirements
- Bachelor 16 Years: Computer Science, Information Technology, Cyber Security
- Masters: Cyber Security
Minimum 5 years of relevant experience in IAM, access governance, or information security, including hands-on experience with user access reviews, RBAC, PAM, SoD, and joiner-mover-leaver processes
User access reviews, RBAC, Privileged access management, Segregation of duties, Joiner-mover-leaver processes, IAM platforms, Access governance, Stakeholder Coordination
Raqami Islamic Digital Bank