User Rights Management Specialist

User Rights Management Specialist at Georgian Card (Tbilisi). Deadline 10 August.

10 August JSC Georgian Card is looking for a User Rights Management (URM) Specialist to join our team. As the User Rights Management (URM) Specialist at JSC Georgian Card, you will be responsible for the daily administration of user access and permissions across the organization`s IT systems. You will manage the entire lifecycle of user accounts in Active Directory, Microsoft Entra ID, and various business applications, ensuring that all access is appropriate and secure. You will be instrumental in implementing the principle of least privilege, conducting periodic access reviews, and supporting audit processes. If you are a detail-oriented and collaborative professional with a strong background in identity and access management, this position is for you. What you will do: ** Process and validate access requests received through the ticketing system, ensuring they align with business needs and security policies. ** Manage the full lifecycle of user accounts—creation, modification, and deletion—across Active Directory, Microsoft Entra ID, and other business systems. ** Administer user group memberships, roles, and application access in accordance with the approved access matrix and security policies. ** Support the Joiner, Mover, and Leaver (JML) processes to ensure timely and accurate updates to user accounts and permissions. ** Manage the lifecycle of local user accounts within business applications. ** Oversee service accounts, including defining ownership, conducting periodic reviews, and managing authentication credential updates. ** Lead periodic user access reviews and certification campaigns, ensuring that any unverified or unnecessary access is revoked. ** Support Segregation of Duties (SoD) controls by identifying conflicting permissions and managing exceptions. ** Collaborate with the Privileged Access Management (PAM) team to coordinate the registration, review, and revocation of privileged accounts. ** Assist in the development and maintenance of access control policies, standard operating procedures (SOPs), and role catalogs. ** Prepare and provide evidence for internal and external audits related to access management and support the remediation of any findings. ** Monitor, analyze, and report on key performance indicators (KPIs) for access management, such as request processing times and inactive accounts. ** Collaborate with the information security team during access-related security incidents to identify and respond to suspicious activity. ** Ensure compliance with information security standards and regulatory requirements, such as PCI DSS. What you have: ** Bachelor`s degree in Computer Science, Information Technology, Information Security, or a related field; or equivalent practical experience. ** A minimum of 2 years of hands-on experience in Identity and Access Management (IAM), systems administration, or IT operations. ** Practical experience administering Active Directory and Microsoft Entra ID, including users, groups, OUs, GPOs, and RBAC configurations. ** Knowledge of Role-Based Access Control (RBAC) and Attribute-Based Access Control (ABAC) models, with experience implementing the principle of least privilege. ** Experience with at least one major IAM platform (e.g., SailPoint, Saviynt, Okta, Microsoft Entra ID Governance, One Identity). ** Knowledge of Privileged Access Management (PAM) concepts and platforms (e.g., CyberArk, BeyondTrust). ** Practical ability to use PowerShell for bulk operations and process automation. ** Knowledge of access control requirements defined in frameworks such as ISO/IEC 27001, PCI DSS, and NIST SP 800-53. ** Experience with ticketing systems (e.g., ServiceNow, Jira) and a proven ability to work within defined SLAs. ** English language proficiency sufficient for reading and preparing technical documentation, communicating with vendors, and reporting. ** Strong analytical skills, detail-orientation, effective communication, and the ability to collaborate effectively with both technical and non-technical teams. Preferred: ** Relevant certifications in Identity and Access Management (IAM), either foundational or specific to a technology platform. What we offer: ** Interesting and challenging job; ** Competitive base salary, learning and developing opportunities. Interested? Please fill in the information, attach your CV and submit by clicking "