Within a government organization, Identity & Access Management (IAM) is not structurally embedded. Current legislation requires that access to systems, applications, and data is properly regulated to grant access where necessary and limit risks. A previous project plan is now being followed up. The goal of implementing IAM is:
- Information security: preventing unauthorized access to sensitive data, protecting against data breaches and misuse.
- Risk reduction: aligning access with roles, minimizing damage in case of errors or malicious actions.
- Supporting business operations: users must be able to work efficiently, access must be arranged quickly and appropriately, including control over license costs.
- Control and compliance: complying with applicable laws and regulations, ability to check who did what (logging and monitoring).
- Management and overview: insight into who has access to which systems, easy adjustment of rights upon entry, transfer, and departure, and regular access checks.
What you do
The focus is on developing a concrete roadmap and impact analysis for IAM, clarifying the ambition, scope, target group, and organizational impact. The roadmap and impact determination guide the steps to be taken before implementation. The assignment focuses on establishing future-proof IAM, where functions, roles, responsibilities, and segregation of duties are standardized across the organization. You will deliver the following concrete results:
- A concrete description of the IAM ambition, suitable for the organization and its objectives, with a substantiated choice for a role assignment model.
- An IAM policy and Governance framework.
- The scope for implementing IAM in terms of systems, applications, data, files, IT infrastructure, and target groups (internal/external).
- An impact analysis providing insight into the AS-IS and TO-BE situations, with a conclusion on necessary preparations for secured IAM.
- The impact analysis covers organizational, process, technological, and human/behavioral aspects.
- Inventory of risks and preconditions, including an investment budget.
- Short study on access management in other government organizations and lessons learned.
- Delivery of a target IAM architecture, focusing on Identity Governance, Authentication, Authorization Management, Privileged Access Management, Directory Services, Federated & External links, Compliance & Audit, Identity Security Operations.
- A concrete roadmap with ready-to-start project assignments (organisational and technical), taking into account ongoing projects.
Profile
You will work on a future-proof setup of Identity & Access Management (IAM). You will map out the appropriate ambition, scope, and organizational impact and translate this into a concrete roadmap with ready-to-start project assignments for organization and technology. You are assertive, decisive, and environmentally aware, and you know how to connect people. You distinguish main and side issues and monitor progress, risks, and dependencies.
You communicate clearly, concretely, and purposefully, both orally and in writing. You are people- and results-oriented and approach issues analytically and integrally.
What they ask
- Knowledge and experience with Identity & Access Management (IAM)
- Experience with and knowledge of authorization models
- Knowledge of Identity Governance, Privileged Access Management (PAM), authentication
- Knowledge and experience with inflow, throughput, and outflow processes
- Performing AS-IS and TO-BE analyses
- Developing roadmaps and project assignments
- Advising management and executive board
- Experience with stakeholder management
Preferences.
- Minimum 5 years of experience (in the last 10 years) with developing roadmaps, AS-IS and TO-BE impact analyses, and project assignments in similar ICT-related trajectories.
- Minimum 5 years of experience (in the last 10 years) with preliminary research for the implementation of Identity & Access Management (IAM) and authorization models, preferably at a decentralized government organization (large municipality >500 FTE or province).
- Minimum 5 years of experience (in the last 10 years) with research into and implementation of Identity Governance, Privileged Access Management (PAM), and inflow, throughput, and outflow processes, preferably at a decentralized government organization (large municipality >500 FTE or province).
Competencies.
- Assertive and decisive
- Environmentally aware and connecting
- Able to effectively separate main and side issues
- Drives and monitors progress, risks
- Communicates clearly, concretely, and purposefully, both orally and in writing
- People- and results-oriented
- Strongly analytical and able to approach issues from an integral perspective
How to apply
View the full assignment text and application details once your tailored application is ready.
Order a tailored application to view the full assignment and application details.
More context, less searching.
You get enough context to judge whether this job is relevant. The full brief, client details and next steps stay available inside the app.