The Team

The IAM team aims to enable fast, secure and precise access to the resources people and systems need across Man Group. As the firm expands its use of AI agents, it must bring greater discipline to machine identities: knowing what each identity is for, who owns it, what it can access and when it should be retired. The Technical Analyst will help build that capability, starting with the service-account estate. This is a hybrid governance and technical role. You will investigate gaps in ownership, lifecycle management and access permissions; work with teams to resolve them; and use Python, automation and appropriate AI-assisted tools to make governance more effective and sustainable at scale.

Role Responsibilities

Machine-Identity Lifecycle

• Help establish and operate processes for creating service accounts, assigning ownership, requesting and approving permissions and group memberships, reviewing access, and changing or retiring accounts.
• Investigate existing accounts to establish their owner, purpose, usage, access and dependencies; work with relevant teams to resolve missing or inaccurate information.
• Identify dormant, unowned or otherwise problematic accounts and coordinate remediation, with appropriate care for operational dependencies.
• Maintain auditable records of ownership, decisions, exceptions and lifecycle changes.

Automation and Control Development

• Help establish and operate processes for creating service accounts, assigning ownership, requesting and approving permissions and group memberships, reviewing access, and changing or retiring accounts.
• Investigate existing accounts to establish their owner, purpose, usage, access and dependencies; work with relevant teams to resolve missing or inaccurate information.
• Identify dormant, unowned or otherwise problematic accounts and coordinate remediation, with appropriate care for operational dependencies.
• Maintain auditable records of ownership, decisions, exceptions and lifecycle changes.

Business Enablement

• Work with application and platform teams to understand how service accounts are used and how they can safely be brought onto a governed lifecycle.
• Help make the governed path straightforward for teams creating new machine identities.
• Translate operational problems into practical requirements for IAM engineers and platform owners, and help validate the resulting changes.

Shared Responsibilities

• Execute relevant IAM processes while recommending improvements to policies, procedures and controls.
• Contribute to team objectives and key results (OKRs), key performance indicators (KPIs), documentation and knowledge sharing.
• Identify, document and escalate security risks, working constructively with stakeholders to resolve them.

Key Competencies

Essential

• Experience using Python to analyse data and automate operational or governance tasks; able to write, test, troubleshoot and maintain your own scripts.
• Understanding of identity and access management concepts, including account lifecycle, access ownership and review.
• Ability to investigate incomplete or inconsistent data, reach a defensible conclusion and follow an issue through to resolution.
• Confidence working with technical teams and communicating clearly with non-technical account owners.
• Sound judgement about when a script is sufficient and when a change needs an engineer-led, production-grade solution.

Advantageous

• Interest in using AI-assisted tooling to improve investigation, data quality and governance workflows, while recognising where outputs need validation and decisions require human accountability.