Identity & Access Management Operations Analyst II (Identity & Access Management Ops)

ABOUT THE POSITION

Although were an apparel and footwear-focused company technology is central to everything we do. Columbia Sportswears Digital Technology (CDT) teams enable an IT infrastructure across four global brands a global supply chain and 500 geographically dispersed stores. These teams support in-store mobile and data platforms to enhance customer interface and service in an ever-evolving industry.

The Identity and Access Management Operations (IAM Ops) team supports identity lifecycle management access administration identity governance and privileged access management for key systems with Columbias global landscape. The Information Security Analyst provides first level support for the team.

HOW YOULL MAKE A DIFFERENCE

• Identity Lifecycle Management:

  • Administer and maintain user identities across SAP Active Directory AS400 D365 and other key applications.

  • Ensure timely provisioning modification and deprovisioning of access based on role-based access controls (RBAC).

  • Support onboarding/offboarding processes and access reviews.

• Access Governance & Compliance:

  • Collaborate with audit and compliance teams to support SOX GDPR and other regulatory requirements.

  • Monitor and remediate access violations and segregation of duties (SoD) conflicts especially within SAP and D365.

  • Assist in periodic access certification campaigns.

YOU HAVE

• 3 years of experience in Identity & Access Management or related IT security roles.

• Hands-on experience with SAP AS400 Active Directory or other key applications

• Familiarity with IGA tools (e.g. SAP GRC SailPoint Saviynt or similar).

• Understanding of IAM concepts principles and best practices including RBAC SoD Access Reviews etc.

• Strong analytical and problem-solving skills.

• Strong interpersonal and service delivery skills

YOU ARE

• An effective communicator with a focus on customer satisfaction

• Knowledgeable of industry and regulatory security standards and frameworks (e.g. NIST CSF SOX PCI/DSS GDPR).

• Able to work both individually and as part of a team.

#LI-SA1

#Hybrid

This job description is not meant to be an all-inclusive list of duties and responsibilities but constitutes a general definition of the positions scope and function in the company.