Graduate Trainee, Technology IAM Operations Analyst in London

Embark on a transformative journey with Marex’s Full‑Time Graduate Programme – an experience tailored to empower and support Analysts. Dive into the ‘Backpack to Briefcase’ bootcamp, unveiling the intricacies of financial services, Marex’s purpose, and strategic priorities. Join your team post‑bootcamp, fostering connections through continuous training.

Learn, grow, and expand your network through a diverse array of sessions fast‑tracking your understanding of Marex and the industry. Engage in workshops covering behavioural, cognitive skills, technical understanding, and business awareness, nurturing your professional development.

Throughout the programme, seize the opportunity to attend informal insight events and a lunch and learn series hosted by senior Marex Leaders. Gain exposure, ask questions, and gain real insights into the business from influential figures. From day one, connect with a network of fellow graduates. Attend training and events together, creating bonds with those sharing your journey. Join Marex, where your passions align with purpose, and your strengths converge with our values.

Department Description

The Technology IAM Operations Graduate role is based within the Support function. The Support function provides technical support for all applications. The first line Application Support team runs a 24/5 global front door to keep us up and running, backed up by business‑aligned Application Support teams that specialise in maintaining their business division’s applications. Each business‑aligned Application Support team works with a corresponding Business Technology and Development team.

Role Summary

The Technology Graduate – IAM Operations Analyst is responsible for managing user access across multiple systems and regions, ensuring security and compliance with regulatory requirements, and maintaining thorough documentation and audit trails. The role involves assessing and implementing role‑based access controls, collaborating with IT, security, and business leaders, investigating access‑related security incidents, and promoting user access policy awareness. The analyst also handles high‑priority requests efficiently, manages Jira ticket queues, and supports the alignment of IAM initiatives with organisational goals, all within a dynamic technology environment.

Overall Responsibilities

• User Access Management: Oversee user provisioning, deprovisioning, and role‑based access control across multiple systems and regions.
• Security & Compliance: Ensure adherence to regulatory requirements (e.g., GDPR, SOX) and internal security policies.
• Reporting and Documentation: Maintain thorough documentation of user access policies, and audit logs for internal and external reporting purposes.
• Role based Access control assessment (RBAC): Ensure role definitions are clear and users are only assigned the necessary rights to perform their role in the organisation in order to minimise risk of excessive or inappropriate permissions.
• Stakeholder Engagement: Work closely with IT, security, and business leaders to align IAM initiatives with organizational goals.
• Incident Management: Lead investigations into access‑related security incidents and recommend remediation measures.
• Training and awareness: Ensure staff understand user access policies, procedures and security awareness.
• Ensure high priority requests are handled efficiently and in compliance with the IAM guidelines and SLA’s.
• Close monitoring of the relevant Jira queues, managing and updating of Jira tickets within agreed SLA’s.

Standard Responsibilities for all Roles

• Ensuring compliance with the company’s regulatory requirements under the FCA.
• Adhere to the operational risk framework for your role ensuring that all regulatory or company determined parameters are complied with.
• Role model for demonstrating highest level standards of integrity and conduct and reflecting Company Values.
• At all times complying with the FCA’s Code of Conduct.
• To ensure that you are fully aware of and adhere to internal policies that relate to you, your role or any other activities for which you have any level of responsibility.
• To report any breaches of policy to Compliance and/or your supervisor as required.
• To elevate risk events immediately.
• To provide input to risk management processes, as required.

Skills and Experience

• Technical Expertise: Understanding of IAM tools (e.g., Okta, SailPoint, CyberArk, Azure AD) and technologies such as SSO (Single Sign-On), MFA (Multi‑Factor Authentication), and role‑based access control (RBAC).
• Security Knowledge: knowledge of security concepts like least privilege, identity governance, and privileged access management (PAM).
• Problem‑Solving Skills: Ability to identify and address IAM‑related security issues and access violations, along with implementing effective solutions.
• Communication Skills: Ability to work with cross‑functional teams (IT, security, legal) and communicate complex IAM concepts to both technical and non‑technical stakeholders.
• Analytical Skills: Ability to assess and review user access data, audit trails, and IAM configurations to ensure compliance and security.
• Experience/knowledge of working in a regulated environment and knowledge of the risk and compliance requirements associated with this.
• Strategic Vision: Ability to design and implement IAM strategies that align with business goals and security needs, both in the short and long term.
• Problem‑Solving: Proficient at identifying complex IAM challenges and developing creative solutions to address them efficiently.
• Stakeholder Engagement: Strong communication skills to interact with senior leadership and other business units, ensuring IAM strategies are aligned with organisational goals and security needs.
• Reporting and Documentation: Ability to clearly present IAM performance, risks, and audit results to senior leadership and regulatory bodies.
• Conflict Resolution: Capable of resolving conflicts related to access management policies or resource allocation with diplomacy and professionalism.
• Auditing and Compliance: Skilled in conducting audits and ensuring IAM systems and practices comply with legal and regulatory requirements.
• Incident Response: Ability to quickly and effectively respond to access‑related security incidents, including breaches, unauthorized access, or policy violations.
• Crisis Management: Strong decision‑making ability in high‑pressure situations, ensuring access management processes remain secure and operational during a crisis.
• Strategic collaborator with insight and agility, able to anticipate future challenges, ensuring operational effectiveness.

Conduct Rules

• You must act with integrity.
• Act with due skill, care and diligence.
• Be open and cooperative with the FCA, the PRA and other regulators.
• Pay due regard to the interests of customers and treat them fairly.
• Observe proper standard of market conduct.

The Company may require you to carry out other duties from time to time. Marex is fully committed to the elimination of unlawful or unfair discrimination and values the differences that a diverse workforce brings to the company.