访问工程师及IAM审计员
Access Engineer & IAM Auditor
我们的客户Growe是iGaming和娱乐行业的领先商业咨询和服务集团。我们打造有效策略和可扩展的解决方案。结合战略愿景与实战经验，Growe帮助企业在快速变化的行业中把握新机遇、进入新市场并实现可持续增长。
适合以下目标的人选：
- 设计并建立标准化的访问审计框架，包括方法论、频率、证据收集和报告模板；
- 定义适用于大型、复杂、多系统环境的风险导向审计范围和抽样方法；
- 在整个环境中定期（计划/周期性）和临时进行访问审计，包括特权和管理账户；
- 审计GCP IAM、LDAP和PAM工具中的过期账户、过度权限、孤立访问和配置错误；
- 准备清晰、可审计的报告和证据包，适用于内部审查和外部审计；
- 跟踪整改行动，与系统和应用负责人合作直至关闭，必要时升级逾期事项；
- 维护审计文档和流程手册，确保可重复性和连续性；
- 根据发现结果、工具变更和不断变化的合规要求持续优化审计方法。
您需要具备的经验：
- 2年以上访问专家/IAM审计师或类似职位经验；
- 具有设计和构建访问审计流程的经验；
- 具有GCP/LDAP的实际操作经验（角色、权限、服务账户、组织策略）；
- 具有特权访问管理（PAM）工具和特权/管理账户审计经验；
- 具有跨IGA工具（如One Identity、Okta、Entra ID、Keycloak）工作的经验；
- 熟悉合规框架，如ISO 27001、SOC 2和NIST；
- 至少达到英语中级水平（书面和口语）。
如果您具备以下个人特质，将是完美的匹配：
- 强烈的团队合作意识，能够在团队中保持积极和建设性的氛围；
- 高度可靠且一致地交付高质量、注重细节的工作；
- 自主、以结果为导向的心态；
- 成长型思维——能够承认错误、从中学习，并采取纠正措施防止再次发生。
我们的客户提供具有竞争力的福利，以支持您的职业和个人发展，包括：
· 健康保险
查看英文原文
Our client, Growe, is a leading business advisory and services group in iGaming and Entertainment. Сreators of strategies that work and solutions that scale. Combining strategic vision with hands-on expertise, Growe helps businesses navigate the fast-evolving industry, seize new opportunities, enter new markets, and achieve sustainable growth.
Perfect for those who aim to:
- Design and establish a standardized access audit framework, including methodology, cadence, evidence collection, and reporting templates;
- Define risk-based audit scope and sampling methodology appropriate for a large, complex, multi-system landscape;
- Run regular (scheduled/periodic) and ad-hoc access audits across the environment, including privileged and administrative accounts;
- Audit GCP IAM, LDAP, and PAM tools for stale accounts, excessive permissions, orphaned access, and misconfigurations;
- Prepare clear, audit-ready reports and evidence packages suitable for internal review and external auditors;
- Track remediation actions with system and application owners through to closure, escalating overdue items as needed;
- Maintain audit documentation and process runbooks to ensure repeatability and continuity;
- Continuously refine the audit methodology based on findings, tooling changes, and evolving compliance requirements.
Experience you’ll need to bring:
- 2+ years in the position of Access Specialist/IAM Auditor or similar;
- Experience designing and building an access audit process;
- Hands-on experience with GCP/LDAP (roles, permissions, service accounts, org policies);
- Experience with Privileged Access Management (PAM) tools and privileged/admin account audits;
- Experience working across IGA tools (e.g., One Identity, Okta, Entra ID, Keycloak);
- Familiarity with compliance frameworks such as ISO 27001, SOC 2, and NIST;
- At least Intermediate level of English (written and spoken).
It's a perfect match if you have those personal features:
- Strong team-player orientation with the ability to maintain a positive and constructive atmosphere within the team;
- High reliability and consistency in delivering work to a high standard of accuracy and attention to detail;
- Self-dependent, result-oriented mindset;
- A growth mindset - comfortable acknowledging mistakes, learning from them, and implementing corrective measures to prevent recurrence.
Our clients offer competitive benefits to support your professional and personal growth, including:
- Health & Wellness Focus;
- Global Medical Coverage;
- Growth Opportunities;
- Benefits Programs (compensation for the gym/stomatology/psychological service
- Performance-Driven Rewards;
- Dynamic Work Environment.
Apply, and let your growth journey begin.
Originally posted on Himalayas