Job
- Level
- Experienced
- Location
- Heidelberg
- Working Model
- Hybrid, Onsite
- Job Field
- IT, Security
- Employment Type
- Full Time
- Contract Type
- Permanent employment
- Salary
- 50.000 to 75.000€ gross/year
Job Summary
In this role, you manage the IAM system, coordinate access requests, maintain IAM policies, and conduct recertifications and internal audits while ensuring compliance with security standards.
Your role in the team
- Operation and Development: You oversee our IAM system as a key user, implement regular updates, and continuously integrate additional applications.
- Single Point of Contact: You handle IAM tickets with high quality and advise projects on access concepts and budget requirements.
- Policy and Governance: You create and maintain IAM policies, Least Privilege standards, RBAC guidelines, and SoD matrices, and submit them annually for approval. In doing so, you implement the requirements from the ICT Risk Management Framework according to DORA.
- Risk Management and Controls: You maintain the IAM risk register, update it at least quarterly, and plan internal audits, such as sample checks and effectiveness tests for recertifications and joiner/mover/leaver processes.
- Recertifications: You manage the regular recertification of all access rights (privileged at least semi-annually, standard annually) and ensure that permissions are only granted for approved functions and revoked in a timely manner.
- Key Figures and Reporting: You define and monitor KPIs and KRIs, e.g., MFA coverage of privileged accounts, recertification rate, and open SoD conflicts. You report quarterly to the Resilience Board and Executive Board and escalate in case of threshold violations.
- Service Providers and Cloud: In close coordination with the ICT third-party officer, you evaluate access controls for suppliers and ICT providers.
- Training and Awareness: You organize the annual IAM training for the board members.
This text has been machine translated. Show original
Our expectations of you
Education
- Completed training as an IT specialist (m/f/d) or a comparable qualification.
Qualifications
- Knowledge in IT access, project, and stakeholder management, as well as good knowledge of operating systems.
- Advanced expertise in the field, product, and processes, with a perspective beyond one's own area of responsibility.
- Analytical and conceptual thinking, strong problem-solving skills, and a good sense of priorities.
- Independent, conscientious, and punctual work approach with proactive planning.
- Clear communication in spoken and written German, as well as a strong service orientation towards colleagues and stakeholders.
- High commitment and willingness to learn.
Experience
- At least 3 years of professional experience in IT system administration, IAM, or IT project management.
- Initial experience with audits.
- Advantage: Experience with regulatory requirements such as DORA or BAIT/VAIT.
This text has been machine translated. Show original
What we offer
- Enjoy the advantages of a corporation in a family-like environment with a start-up character where everyone feels comfortable.
- Get the training you deserve and that will advance you – we support you with our internal and external opportunities.
- Attractive compensation: With 14 monthly salaries, company pension scheme, asset-building benefits, job ticket, employee discounts, and a job (e)-bike.
- Flexible & mobile working: Customize your working hours and location to suit your life, providing you with the right work-life balance.
- More time for yourself: 30 days of vacation, days off on December 24th and 31st, and up to 15 additional vacation days with our "4YouDays".
This text has been machine translated. Show original
Topics You Will Work On
Job Locations
About Your Employer
Janitos Versicherung AG
Wir sind ein etablierter und dynamisch wachsender Schaden- und Unfallversicherer mit Sitz in Heidelberg. Unsere rund 230 Mitarbeiter betreuen über 615.000 Verträge und sorgen für rund 109 Mio. Euro Jahresumsatz. Als B2B-Anbieter verkaufen wir unsere Produkte über Makler, Maklerpools und -verbünde sowie Finanzvertriebe.
Description
- Company Type
- Established Company
- Working Model
- Hybrid, Onsite
- Industry
- Banking, Finance, Insurance