Cyber Security Grc

Job Purpose MSC Group s Cruise Division is recruiting a Cyber Security GRC Specialist - Identity Access Management to support the implementation, operation and continuous improvement of the organization s Identity Access Management (IAM) controls and services.
The role contributes to IAM activities across Identity Governance Administration (IGA), Single Sign-On (SSO), Privileged Access Management (PAM), and other approved on-premises and cloud IAM solutions, including One Identity Manager, One Identity Safeguard, Microsoft Entra ID and Entra PIM, Okta, OneLogin and Active Directory.
The specialist will apply approved IAM architecture, standards, roadmaps and procedures; configure and test solutions; maintain documentation; support application onboarding, releases and service monitoring; and escalate material design, investment, supplier or service-level decisions to the accountable senior role.
The role combines developing governance knowledge with hands-on functional and technical execution.
It will configure, test, monitor and validate IAM controls, support integrations and provide second-line specialist assistance, escalating complex integrations, control exceptions and high-risk issues through defined support and governance paths.
The specialist works with relevant stakeholders to document identity risks, access decisions, control evidence, findings and remediation actions and to escalate issues requiring senior ownership.
Key Accountabilities IAM Governance Support the maintenance of the IAM service backlog and roadmap by collecting requirements, documenting priorities, monitoring assigned actions and preparing inputs for architecture, investment, licensing, capacity, supplier and service-level decisions.
Apply and maintain approved IAM policies, standards, control objectives, design principles, operating procedures and RACI documentation.
Document integration requirements and support the configuration and testing of connections between authoritative sources, applications, infrastructure and cloud platforms, using approved APIs and federation protocols.
Execute assigned product and service lifecycle activities, including configuration, testing, release support, change records, upgrades, security hardening, operational documentation and retirement tasks, following approved plans and standards.
Maintain IAM risk, exception and finding records; collect control evidence supporting ISO/IEC *, PCI DSS and NIS2 requirements and internal and external audits; monitor remediation actions; and prepare KPI and KRI reporting for review by the accountable senior role.
Identity Governance Administration (IGA) Configure, administer, monitor and document approved IGA capabilities, including Joiner-Mover-Leaver (JML) lifecycle, access request, provisioning, role, entitlement, RBAC and segregation-of-duties controls.
Support application and data-source onboarding by documenting requirements, configuring and testing approved connectors and workflows, maintaining documentation and escalating design exceptions or production-acceptance issues.
Execute access-review and recertification activities, identify orphaned, dormant or excessive access, maintain auditable evidence and follow up assigned remediation actions.
Federated Access Management (FAM) Configure, administer, monitor and document approved access-management capabilities for application onboarding, Single Sign-On, federation, provisioning, Multi-Factor Authentication, passwordless authentication and Conditional Access.
Apply and test approved controls for workforce, external and workload identities; document results and escalate exceptions.
Support the assessment and onboarding of approved cloud IAM capabilities by executing configuration and testing activities and validating required logging, monitoring and support procedures.
Privileged Account Session Management (PAM/PSM) Configure, administer, monitor and document approved privileged-access capabilities, including account onboarding, vaulting, rotation, workflows, session brokering, monitoring and emergency access.
Apply and test approved privileged-role controls; identify and escalate permanent or excessive administrative access.
Apply the approved privileged-access model across on-premises and cloud environments.
Support integrations with identity governance, ticketing, monitoring and SOC processes; investigate assigned events; document findings; track remediation; and escalate complex or high-risk cases.
Qualifications Professional fluency in English and Italian, with the ability to prepare clear technical and governance documentation.
Degree in Cybersecurity, Information Technology, Computer Science, Engineering or a related discipline, or equivalent relevant professional experience.
2-5 years of relevant experience in enterprise Identity Access Management, including practical administration, configuration, tes