IAM Governance Business Analyst

A Career with Point72’s Technology Team As Point72 reimagines the future of investing, our Technology group is constantly improving our company’s IT infrastructure, positioning us at the forefront of a rapidly evolving technology landscape. We’re a team of experts experimenting, discovering new ways to harness the power of open source solutions, and embracing enterprise agile methodology. We encourage professional development to ensure you bring innovative ideas to our products while satisfying your own intellectual curiosity. Our Technology Infrastructure Team engineers and operates the foundational technology platforms that power all of Point72’s applications and businesses. Our disciplines span a broad array of technologies from datacenter infrastructure to large scale cloud services, with the shared goal of providing the most reliable, performant, modern technology platforms to improve time-to-market for our business. We also deliver end-user technology solutions to support the evolving collaboration and productivity needs of our global teams. Our team focuses on innovation and challenging the current state of our infrastructure technology in a fast-paced, dynamic, and collaborative working environment. What you’ll do: As a member of the Data Platform Engineering team, you will support the development and operation of our data infrastructure. Working closely with software engineers, data engineers, you'll contribute to building, maintaining, and improving reliable systems that power our enterprise data platform. Your responsibilities include: Contribute to the design and implementation of cloud infrastructure for our large-scale data services and distributed systems, focusing on scalability, performance, and resilience Provision and manage core cloud infrastructure on AWS (including compute, storage, networking, and IAM) utilizing Infrastructure as Code (IaC) principles and tools, primarily Terraform Support the evolution of our container orchestration platform

Our Security team keeps Asana's employees, users, and customers safe, by proactively addressing threats and fostering a culture of security throughout our product and operations. We are looking for a savvy Security Engineer to join our Blue Team in Warsaw. You will be a foundational member of the security presence in our Warsaw innovation hub, partnering directly with IT, infrastructure, and product teams to ensure we have robust detection and response capabilities. Detection and response here leans on engineering practice. We are investing in automation and detection-as-code to cut down on manual triage, and we are looking for someone comfortable writing and reviewing code as part of that work. This role is based in our Warsaw office with an office-centric hybrid schedule. The standard in-office days are Monday, Tuesday, and Thursday. Most Asanas have the option to work from home on Wednesdays. Working from home on Fridays depends on the type of work you do, and your recruiter can share more about the in-office requirements. We offer a Contract of Employment (UoP) for our employees in Poland. What you'll achieve: Lead detection, analysis, and response across our cloud and SaaS environments, identity providers, endpoints, and the software supply chain , ensuring timely and effective remediation of security incidents. Investigate and remediate security incidents across cloud infrastructure (AWS/GCP/Azure), identity providers (e.g., Okta), and SaaS environments. Investigate and contain software supply chain and CI/CD incidents , from unauthorized changes in build environments to suspect third-party dependencies (e.g., npm, PyPI). Help build and maintain our detection-as-code infrastructure (e.g., Panther), SOAR automation, and response playbooks, treating detection logic as tested, version-controlled production code. Utilize and optimize security tools such as Panther for SIEM, CrowdStrike for endpoint detection and response, and other security platforms.

CAPCO POLAND *We are looking for Poland based candidate. Capco is a fully independent, global management and technology consultancy. For 25 years we have combined innovative thinking with deep industry knowledge to deliver business consulting, digital transformation and technology services to Finance and Energy markets. Our collaborative and efficient approach helps clients reduce costs and manage risk and regulatory change while increasing revenues. We are thinkers, innovators, and disruptors. We are small enough to care but large enough to matter. As an IT Security Analyst , you will play a key role in supporting a large-scale Secrets & Credential Management initiative. You will analyze current-state environments, identify control gaps, and define robust, scalable security requirements. Working across technical and business teams, you will help ensure that sensitive credentials are governed, controlled, and aligned with regulatory and operational expectations. Key Responsibilities: Conduct end-to-end analysis of secrets and credential management practices across applications, infrastructure, and platforms Identify, classify, and document secrets, including ownership, usage, storage, lifecycle stage, and associated risks Assess control gaps (e.g., unmanaged credentials, hardcoded secrets, weak auditability) and define remediation approaches Define functional and non-functional requirements for centralized secrets management solutions Facilitate workshops with stakeholders to gather requirements, validate findings, and support governance activities Required Skills and Experience: At least 5 years of experience in a similar role. At least 2 years of experience in working with IAM projects. Experience in IT security analysis, security requirements engineering, or security governance within complex environments Strong understanding of IAM, PAM, least privilege, and secure access governance principles Knowledge of credential types (passwords, SSH

CAPCO POLAND *We are looking for Poland based candidate. Capco is a fully independent, global management and technology consultancy. For 25 years we have combined innovative thinking with deep industry knowledge to deliver business consulting, digital transformation and technology services to Finance and Energy markets. Our collaborative and efficient approach helps clients reduce costs and manage risk and regulatory change while increasing revenues. We are thinkers, innovators, and disruptors. We are small enough to care but large enough to matter. We are seeking an experienced Consultant / Senior Consultant with a strong background in Identity & Access Management (IAM), Privileged Access Management (PAM), and/or Secrets Management to support the delivery of strategic User Access Management initiatives within a complex enterprise environment. This role is ideal for a professional who combines cybersecurity domain knowledge with strong project delivery capabilities and is comfortable operating across heterogeneous, multi-vendor landscapes with significant customization and organizational complexity. Key Responsibilities: Advise on the definition and shaping of project charters, including scope, objectives, timelines, success criteria, requirements, and risk mitigation approaches. Drive and coordinate end-to-end delivery activities across IAM, PAM, Secrets Management, and related cybersecurity initiatives. Guide project execution using Agile, Waterfall, or hybrid delivery methodologies, ensuring alignment with agreed objectives and milestones. Partner with stakeholders across Cybersecurity, IAM, Infrastructure, Risk, Application Development, Operations, and third-party vendors to support programme outcomes. Translate complex technical concepts into clear implementation plans, stakeholder communications, and executive-level updates.Identify, monitor, and communicate project risks, dependencies, issues, and mitigation actions. Support gove