PAM Risk Assessment Specialist

Job Title: PAM Risk Assessment Specialist

Start Date: Immediately 

Duration: 4 months

Location: Remote

Our client is the leading grocery retailer in the Netherlands and is looking for a seasoned PAM Risk Assessment Specialist to join the IAM (Identity and Access Management) to conduct a comprehensive assessment of their privileged access management (PAM) protocols to identify, prioritize and mitigate strategies/controls to enhance their security posture and minimize cybersecurity risks. The PAM Specialist will closely work with technical teams as well as CIO's to give insights into the current risk landscape of privilege access management and ensure privilege access management within the organization is robust, secure, and compliant with the industry standards.

Responsibilities:

1. Identification of Assets and Privileges: Identify all assets requiring protection and evaluate their current access protocols to critical assets ('crown jewels')
2. Cybersecurity Risks Identification: Perform technical assessments to validate existing implementation and controls, identify excessive privileges, inadequate password and credential management, and insufficient monitoring and auditing
3. Policy and Standard assessment: Review and analyze existing policies and standards regarding privileged access
4. Security Controls Evaluation: Assess and analyze existing security controls and safeguards, identify gaps, vulnerabilities and non-compliances; estimate the likelihood of potential security breaches
5. Mitigation Solutions Proposal: Develop and propose actions to mitigate identified risks, ensuring enhanced security protocols
6. Risks Prioritization: Rank risks based on impact and likelihood to facilitate focused and effective mitigation efforts
7. Documentation and Reporting: Document findings and recommendations; prepare a detailed risk assessment report
8. Stakeholder Engagement: Conduct interviews and engage with key personnel and executive stakeholders to understand existing controls and concerns as well as present findings and recommend solutions

Requirements

• Education: 
  • Bachelor’s or Master’s degree in Cybersecurity, Information Technology, or related field. Certifications in security or risk management are a plus
• Experience: 
  • Proven experience in PAM (privileged access management), IAM (identity access management), and cybersecurity risk assessments
    • Working knowledge of Cyberark and Azure PIM is beneficial
    • Familiarity with large operational environments is advantageous
  • Proven experience with Risk Assessment Reporting: A detailed report outlining findings, risk ratings, and recommendations for enhancing PAM security
  • Extensive experience in creating Executive Summaries: A concise document highlighting key findings and high-priority risks for executive stakeholders and CIO’s
  • Risk Mitigation Plan: A comprehensive plan proposing controls and actions to mitigate identified risks effectively
  • Presentation: Deliver a comprehensive presentation of assessment findings to key stakeholders, including a Q&A session to address concerns and queries