IAM Security Analyst

Pay range: USD $100,000.00 - $120,000.00 / Year

Your opportunity

At Schwab, you're empowered to make an impact on your career. Here, innovative thought meets creative problem solving, helping us "challenge the status quo" and transform the finance industry together.

We believe in the importance of in-office collaboration and fully intend for the selected candidate for this role to work on site in the specified location.

Identity and access management (IAM) technologies and business processes enable the creation, maintenance, and use of digital identity - ensuring that the right people gain access to the right materials and records at the right time. The IAM program serves the needs of Schwab by implementing IAM best practices via technologies and methods that improve convenience and ease of access for workforce members while safeguarding records and other key data.

The IAM Access Risk and Controls (ARC) team is focused on the validation and continuous operating effectiveness of centralized and distributed IAM processes, including establishing and leveraging data assurance processes for continuous monitoring, process improvement, and risk mitigation for Schwab.

The Senior Specialist, Security Analytics & Operations will support the process design and development to govern and implement zero trust principles during the onboarding of information resources into the control environment, with a focus on authentication and non-human identity management on behalf of our cybersecurity organization. This person will establish partnerships with multi-organizational teams to identify new use cases, increase awareness of established capabilities, and drive risk mitigation and process improvement.

• Conduct risk assessments (e.g., access, authentication, and non-human identity use cases) to identify control gaps, evaluate impact/likelihood, and guide recommended actions/solutions.
• Provide oversight and guidance for application and platform integrations to ensure adherence to Schwab's zero trust security model and Schwab standards.
  • Gain a thorough understanding of processes and provide oversight and guidance for application and platform integrations, ensuring secure operations and improved efficiency in alignment with Schwab's zero trust security model and standards.
  • Review existing manual processes to pinpoint bottlenecks, repetitive tasks, and error-prone procedures
• Support implementation of identity verification and strong authentication programs including growing program maturity and capabilities.
  • Collaborate with cross-functional teams to provide oversight and guidance for application and platform integrations, ensuring adherence to Schwab's zero trust security model and standards while continuously improving secure processes and operational efficiency.
• Excel at scaling programs across a large organization and its related applications.

• 3+ years of Cybersecurity and/or Identity & Access Management experience.
• Expertise in application authentication technologies and concepts (e.g. SAML, OIDC, Kerberos, LDAP, MFA, SSO, Identity Verification, Passwordless) and tools (Ping Federate/SSO, Ping ID MFA, Active Directory, Safeguard, HYPR, Entra).
• Expertise in analysis of application roles, entitlements, and aligning to company standards and requirements.
• Demonstrated experience working within a complex and matrixed environment.
• Strong analytical skills and attention to detail.
• Demonstrated ability to analyze complex information, synthesize key themes, and provide a concise summary of recommended actions/solutions.
• Able to quickly learn new technology and utilize a variety of data and systems to proactively identify solutions to improve processes.
• Proven work ethic with a high level of integrity to build trust with internal partners.
• Collaborative work style with demonstrated success in a team environment.
• Effective communicator, problem-solver, team member and results-focused individual.

• Bachelor's degree in computer science or related field, or non-technical bachelor's degree with equivalent information technology work experience.
• Expertise with control frameworks (e.g. NIST 800-53).
• Experience with other automation tools such as Copilot Studio, Microsoft Power Apps and/or Power Automate.

• 401(k) with company match and Employee stock purchase plan
• Paid time for vacation, volunteering, and 28-day sabbatical after every 5 years of service for eligible positions
• Paid parental leave and family building benefits
• Tuition reimbursement
• Health, dental, and vision insurance