Senior Information Security Analyst

About Our Company Ameriprise India LLP has been providing client based financial solutions to help clients plan and achieve their financial objectives for 20 years. We are part of Ameriprise Financial Inc., a US financial planning company headquartered in Minneapolis with a global presence and diversified financial services leader with more than $1.5 trillion in assets under management, administration and advisement as of year-end 2024. The firm’s focus areas include Asset Management and Advice, Retirement Planning and Insurance Protection. Be part of an inclusive, collaborative culture that rewards you for your contributions, and work with other talented individuals who share your passion for doing great work. You’ll also have plenty of opportunities to make your mark at the office and a difference in your community. So, if you're talented, driven and want to work for a strong, ethical company that cares, take the next step and create a career at Ameriprise India LLP.

The Senior Information Security Analyst is an analyst-focused role within Identity & Access Governance (IAG). The role evaluates whether identities, access credentials and permissions are governed in accordance with policy, least-privilege principles and regulatory expectations. The analyst uses data, evidence and platform knowledge to identify access risk, investigate exceptions, challenge ineffective outcomes, coordinate remediation and communicate control health to stakeholders. This is not a pure IAM implementation, platform engineering or operations ticket-processing role. Technical knowledge enables analysis, but success is measured by the quality of governance judgement, follow-through, evidence, reporting and risk reduction.

Analyze identity and access data to determine whether access remains appropriate, approved, timely and aligned to least privilege. Identify control gaps, policy violations, unusual patterns and incomplete outcomes; assess risk and recommend proportionate action. Coordinate governance activities across application owners, business reviewers, IAM delivery teams, infrastructure teams, audit, risk and other control partners. Drive issues through remediation and validate closure using reliable evidence rather than relying only on task or ticket completion. Prepare concise metrics, risk summaries, audit evidence and leadership reporting that explain control health, exceptions, ageing and remediation progress. Contribute to policies, standards, procedures, control design and continuous improvement in response to new risks, technologies and regulatory expectations. Explains the risk and control purpose behind an activity, not only the procedure or tool steps. Uses logical, evidence-based judgement when the documented procedure does not fully address the situation. Demonstrates strong governance judgement in at least one relevant identity domain, with the aptitude to learn adjacent areas.  Identifies whether an issue originates from technology, data, process, a policy exception, or a failed control, and recommends action that addresses the underlying risk. Owns assigned issues from identification through follow-up, escalation, documented remediation, and evidence-based closure. Communicates clearly with technical and business stakeholders, including when challenging an incomplete or inappropriate outcome. Identifies recurring themes and proposes proportionate improvements to controls, reporting or process design. Core Capability Areas 1. Access Review and Certification Govern and facilitate periodic access reviews and certifications, including user, privileged, and application access. Govern identity lifecycle controls, including joiner, mover, and leaver controls; transfer reviews; and termination controls. Govern specialized reviews and remediation activities, including service-account reviews, orphan-account remediation, inactivity reviews, segregation-of-duties monitoring, and role-based access