Identity and Access Management Analyst

Salford
3 weeks ago
Create job alert

To support the Chief Information Security Officer in managing and reporting on Identity and Access Management (IAM) within Technology Services and Business teams at AJ Bell, the IAM function collaborates with the business and the broader information security team to ensure that appropriate IAM controls, policies, and procedures are in place, aligning with industry best practices and regulatory requirements. This role includes performing access controls such as user access reviews, provisioning and de-provisioning user accounts, and managing role-based access controls (RBAC). Additionally, the IAM team develops and maintains IAM strategies, prepares regular reports for senior stakeholders, and works with business units to implement and update IAM policies and standards. The role also involves coordinating and responding to external and internal IT audits related to IAM.

The key responsibilities of the role are:

  • Provision of access for joiners, movers, and leavers, collaborating with multiple teams within the enterprise to ensure that users have access to the resources necessary to perform their respective roles.

  • Periodic access recertification and follow up activities to ensure the access and privileges are adjusted accordingly to confirmation of line managers.

  • Drives campaigns and plays a critical role in supporting users to acquire the required skills for identity self-management.

  • Preparing for and supporting internal and external audits related to access controls and IAM processes.

  • Generating and analysing reports on access control activities, incidents, and compliance status.

  • Identifying and mitigating risks associated with identity and access management.

  • Developing, implementing, and maintaining IAM policies, standards, and procedures and ensuring AJ Bell’s processes align

  • Developing and delivering training sessions and materials for end-users and IT staff.

  • Continuously improving IAM processes and technologies to enhance security and efficiency.

    Knowledge & Skills

  • Proficiency with IAM-related tools and platforms such as Active Directory, SailPoint, CyberArk, Microsoft Azure AD and basic PowerShell scripting.

  • Knowledge of role-based access control (RBAC), attribute-based access control (ABAC), and discretionary access control (DAC).

  • Strong grasp of information security principles and practices.

  • Knowledge of regulations and standards such as GDPR, NIST and ISO 27001.

  • Ability to analyse access control data to identify patterns and anomalies.

  • Skills in conducting root cause analysis of security incidents related to IAM.

  • Experience in quickly resolving IAM-related incidents and issues.

  • Ability to clearly communicate technical information to both technical and non-technical stakeholders.

    Ability to stay updated with the latest IAM technologies and trends and apply them to improve security and efficiency.

    About us

    AJ Bell is one of the fastest-growing investment platform businesses in the UK offering an award-winning range of solutions that caters for everyone, from professional financial advisers to DIY investors with little to no experience. We have over 644,000 customers using our award-winning platform propositions to manage assets totalling more than £103.3 billion. Our customers trust us with their investments, and by continuously striving to make investing easier, we aim to help even more people take control of their financial futures.

    Having listed on the Main Market of the London Stock Exchange in December 2018, AJ Bell is now a FTSE 250 company.

    Headquartered in Manchester with offices in central London and Bristol, we now have over 1,500 employees and have been named one of the UK's 'Best 100 Companies to Work For’ for six consecutive years and in 2025 named a Great Place to Work®.

    At AJ Bell you can expect a friendly working environment with a strong sense of teamwork, we have a great sense of pride in what we do, and this is reflected in our guiding principles.

    Our perks and benefits

  • Competitive starting salary

  • Starting holiday entitlement of 25 days, increasing up to 31 days with length of service and a holiday buy and sell scheme

  • A choice of pension schemes with matched contributions up to 6%

  • Discretionary bonus scheme, Annual free share awards scheme & Buy As You Earn (BAYE) Scheme

  • Health Cash Plan – provided by SimplyHealth & Private healthcare scheme and dental plan

  • Free gym membership

  • Employee Assistance Programme & Sick pay+ pledge

  • Bike loan scheme & Loans for travel season tickets

  • Enhanced maternity, paternity, and shared parental leave

  • Calendar of social events, including monthly payday drinks, annual Christmas party, summer party and much more

  • Ongoing technical training, Professional qualification support & Talent development programmes

    Hybrid working

    At AJ Bell, our people are the heart of our culture. We believe in building strong connections by working together. That's why we offer a hybrid working model, where you’ll spend a minimum of 50% of your working time per month in the office. For new team members, an initial period will be full-time in the office to help you immerse yourself in our business and build valuable relationships with your colleagues.

    AJ Bell is committed to providing an environment of mutual respect where equal employment opportunities are available to all applicants and all employees are empowered to bring their whole self to work

Related Jobs

View all jobs

Test Analyst

Business Process Analyst - Cyber Security

IAM Analyst

Junior Information Security Analysist

Automation Test Engineer CGEMJP00325931

Lead Automation Test Architect

Subscribe to Future Tech Insights for the latest jobs & insights, direct to your inbox.

By subscribing, you agree to our privacy policy and terms of service.

Industry Insights

Discover insightful articles, industry insights, expert tips, and curated resources.

The Skills Gap in Cyber Security Jobs: What Universities Aren’t Teaching

Cyber security has become one of the most critical disciplines in the modern economy. From protecting financial systems and healthcare data to securing national infrastructure, cloud platforms and supply chains, cyber security professionals now sit at the frontline of digital trust. Demand for cyber security talent in the UK has surged. Job vacancies remain high, salaries continue to rise, and organisations across every sector report difficulty hiring skilled professionals. Yet despite this demand, many graduates struggle to break into cyber security roles and employers consistently report that candidates are not job-ready. The problem is not intelligence, ambition or academic effort. It is a persistent and widening skills gap between university education and real-world cyber security work. This article explores that gap in depth: what universities teach well, what they routinely miss, why the gap exists, what employers actually want, and how jobseekers can bridge the divide to build sustainable careers in cyber security.

Cyber Security Jobs for Career Switchers in Their 30s, 40s & 50s (UK Reality Check)

If you’re thinking about switching into cyber security in your 30s, 40s or 50s, you’re in good company. Across the UK, organisations of all sizes are hiring people from diverse backgrounds to protect systems, data & customers. But with hype around “hackers” & quick-win courses, it’s hard to separate reality from fiction. This guide gives you a UK reality check: which roles genuinely exist, what employers actually want, how training really works, what to expect on salary & progression & whether age matters. Whether you come from finance, project management, operations, law, HR or customer service, there is a credible route into cyber security if you approach it strategically.

How to Write a Cyber Security Job Ad That Attracts the Right People

Cyber security is now a board-level priority for organisations across the UK. From financial services and healthcare to critical infrastructure, SaaS platforms and the public sector, demand for skilled cyber security professionals continues to grow. Yet despite this demand, many employers struggle to attract the right candidates. Cyber security job adverts often generate large volumes of applications, but few are a genuine match. Meanwhile, experienced security engineers, analysts and architects quietly ignore adverts that feel vague, unrealistic or disconnected from real security work. In most cases, the problem is not a lack of talent — it is the quality of the job advert. Cyber security professionals are trained to assess risk, spot weaknesses and question assumptions. A poorly written job ad signals organisational immaturity and weak security culture. A well-written one signals seriousness, competence and trust. This guide explains how to write a cyber security job ad that attracts the right people, improves applicant quality and positions your organisation as a credible security employer.