SE_IT Security & Risk Officer_Senior

Identity & Access Manager: Scope: Assess, redesign, and enforce identity and access controls across all CDC teams using Entra ID, PIM, and SSO. Our current access structure is fragmented and unstandardized. Teams request ad-hoc permissions, share single accounts for daily browsing and high-risk incident response, and use inconsistent PIM. We need this role to restructure overgrown Entra groups, lock down sensitive tools like Purview, and build automated starter, mover, and leaver workflows to close critical security gaps. Skills: Review and rationalize all access needs across every CDC team (CSOC, CDCE, DFI, Analytics, Threat Hunting). Clean up Entra ID by defining consistent group structure, naming conventions, and dynamic membership rules. Separate directory roles, application RBAC, and cloud resource permissions into clear layers. Enforce PIM with required justification and approvals for sensitive tools like Purview AI logs. End single-account usage by separating everyday browsing identities from privileged and incident response tasks. Map all remaining non-SSO tools into Entra ID using modern authentication standards. Formalize starter, mover, and leaver workflows to handle team transitions cleanly. Set up scheduled Entra access reviews for regular manager attestations. Work directly with the central IT IAM team to implement and enforce all changes.