Develop and maintain Access Control Design Documents covering access models, roles, entitlements, and control objectives .
Apply key access control principles - Least Privilege, Need to Know, RBAC, SoD , and Access Lifecycle Management - in all design activities.
Conduct stakeholder workshops with business, IT, and risk teams to identify access needs, validate designs, and obtain approvals.
Collaborate with business and IT stakeholders to analyse access requirements and entitlement mappings.
Design and document functional roles leveraging SailPoint capabilities, ensuring alignment with GIRP , audit, and compliance frameworks to reduce user access review fatigue.
Translate/implement approved functional role designs into technical configurations within SailPoint and other IAM platforms.
Translate/implement approved access control designs into technical configurations within SailPoint and other IAM platforms.
Ensure all designs meet audit, compliance, regulatory standards and internal control frameworks.
Maintain strong governance, communication, and coordination across multiple program streams to ensure consistent and sustainable access control implementation.
Engage with business, compliance, and IT stakeholders to gather and document SoD and access control requirements.
Design the SoD Mat rix, defining toxic combinations, risk matrices, and mitigating controls.
Configure and implement SoD policies, rules within SailPoint IdentityIQ .
Integrate target systems and ensure accurate role-to-entitlement mapping for SoD analysis.
Develop role mining processes aligned with SoD principles.
Test, validate , and optimize SoD rule performance and reporting capabilities.
Deliver comprehensive documentation covering design, implementation, and governance processes.
Provide training and knowledge transfer to internal teams for ongoing SoD management.
YOUR SKILLS & EXPERIENCE
Experience with the banking domain and how business process works in financial institutions.
Understanding of IAM principles and disciplines such as audit/governance.
Understanding of SOD terminologies.
Experience in IAM design/consulting work.
NAB risk management tools like the GRACE governance, risk and compliance platform.
Support/maintenance experience in SailPoint identity IQ/GIT
Familiar with software development process .
THE BENEFITS AND PERKS
We appreciate and reward our colleagues who do great work every day - from excelling for our customers, to taking ownership of an issue to get it resolved. Here's how we support our people with a range of exclusive benefits.
Generous compensation and benefit package
Attractive salary
20-day paid annual leave and 7-day paid sick leave
13th month salary and Annual Performance Bonus
Premium healthcare for yourself and family members
Monthly allowance for team activities
Premium welcome kit and occasional gifts of appreciation
Extra benefits on your work anniversary
Exciting career and development opportunities
Large scale products with modern technologies in banking domain
Clear roadmap for career advancement in both technical and leadership pathways
Access to digital learning platform such as Udemy
Consistent and high-quality leadership training through the Distinctive Leadership program (DLP)
Specialist capabilities and accreditations in key skill areas such as Cloud Engineering, Digital, Data,
Security and SREs (Site reliability engineers)
Sponsored English course with native teachers
Opportunity for training in Australia
Professional and engaging working environment
Hybrid working model and excellent work-life balance
State-of-the-art & modern Agile office
Food and beverages in the office pantry
Employee Assistance Program to improve your physical and mental health
Annual team activities and company events
A solid and talented team behind you - great people who love what they do
A DIVERSE AND INCLUSIVE WORKPLACE WORKS BETTER FOR EVERYONE
Benefits
Health insurancePerformance bonus
Additional Information
Job Posting End Date:
Closing Date: 30 August 2026 Worker Type:
Permanent
The Senior Analyst, Access Control Design is responsible for designing and documenting an enterprise-wide Access Control Framework that upholds key security principles - including Least Privilege, Need to Know, Role-Based Access Control (RBAC), and Segregation of Duties (SoD). The role ensures that access rights across critical systems are secure, compliant, and aligned with business functions. The Senior Analyst will lead stakeholder engagement sessions to capture requirements, design functional roles, and deliver a comprehensive Access Control Design Document (ACDD) supporting regulatory and audit objectives.
Nab · 29 Lieu Giai Street, Ngoc Ha Ward