Senior Information Security Analyst

About Our Company Ameriprise India LLP has been providing client based financial solutions to help clients plan and achieve their financial objectives for 20 years. We are part of Ameriprise Financial Inc., a US financial planning company headquartered in Minneapolis with a global presence and diversified financial services leader with more than $1.5 trillion in assets under management, administration and advisement as of year-end 2024. The firm’s focus areas include Asset Management and Advice, Retirement Planning and Insurance Protection. Be part of an inclusive, collaborative culture that rewards you for your contributions, and work with other talented individuals who share your passion for doing great work. You’ll also have plenty of opportunities to make your mark at the office and a difference in your community. So, if you're talented, driven and want to work for a strong, ethical company that cares, take the next step and create a career at Ameriprise India LLP. Job Description The Senior Information Security Analyst is an analyst-focused role within Identity & Access Governance (IAG). The role evaluates whether identities, access credentials and permissions are governed in accordance with policy, least-privilege principles and regulatory expectations. The analyst uses data, evidence and platform knowledge to identify access risk, investigate exceptions, challenge ineffective outcomes, coordinate remediation and communicate control health to stakeholders. This is not a pure IAM implementation, platform engineering or operations ticket-processing role. Technical knowledge enables analysis, but success is measured by the quality of governance judgement, follow-through, evidence, reporting and risk reduction. Key Responsibilities ·       Analyze identity and access data to determine whether access remains appropriate, approved, timely and aligned to least privilege. ·       Identify control gaps, policy violations, unusual patterns and incomplete outcomes; assess risk and recommend proportionate action. ·       Coordinate governance activities across application owners, business reviewers, IAM delivery teams, infrastructure teams, audit, risk and other control partners. ·       Drive issues through remediation and validate closure using reliable evidence rather than relying only on task or ticket completion. ·       Prepare concise metrics, risk summaries, audit evidence and leadership reporting that explain control health, exceptions, ageing and remediation progress. ·       Contribute to policies, standards, procedures, control design and continuous improvement in response to new risks, technologies and regulatory expectations. Core Capability Areas 1. Access Review and Certification ·       Govern and facilitate periodic access reviews and certifications, including user, privileged, and application access. ·       Govern identity lifecycle controls, including joiner, mover, and leaver controls; transfer reviews; and termination controls.