Security Analyst III - Identity & Access Management in Welwyn Garden City

About the role

You work across the Security, Product, Engineering, Operations and Programme Functions that deliver the work of the Cyber Security and IAM teams. You act as a trusted advisor and guide for colleagues across wider technology teams and the business. You maintain productive relationships with our current vendors, potential vendors and other security groups outside of Tesco.

You will be responsible for both continually improving the insight in your area of specialism and working across teams to step change approaches and tooling as required to achieve security outcomes. Communication of issues and the ability to lead alongside others to plan and execute large‑scale/complex remediation approaches are central to this role. You are the ultimate escalation point for other Security Analysts seeking help with handling complex and novel operational issues, acting as a subject matter expert and offering technical coaching and advice.

Building an attitude of innovation and curiosity in others around you is key to this role. Using your extensive IAM knowledge and experience, and your broader security knowledge, you apply this to both existing and novel issues. You continually seek to improve your knowledge, both theoretical and applied, in IAM and beyond. You are able to author and contribute to Security Policies and Technical Standards within IAM and continually seek to improve our policies in line with emerging thinking and observed scenarios within our business.

You seek to develop our technical standards and supporting documentation to aid Technology team members to improve our security posture over time. You work cross‑functionally to identify and deliver opportunities for improvement; obtaining, analysing and presenting data and insight to stakeholders across multiple teams to gain agreement. You work with others to generate remediation and improvement strategies of company‑wide scale and to establish plans to execute these improvements. You lead implementation of improvements alongside others and act as a technical consult throughout, working through technical challenges as needed.

You act as the ultimate escalation point for IAM related opportunities and problems across all teams and demonstrate your responsiveness for important issues, working collaboratively with other teams as needed. You are recognised as a subject matter expert in IAM and mentor others in the domain, while asking challenging questions to help grow experience and understanding. You are a good communicator, able to explain complex concepts both within the team and across other parts of the business.

You are comfortable working with large‑scale datasets and data manipulation/business intelligence software, and have a proven ability to work to identify issues and improvements, while able to switch to working as part of a wider group where needed.

You will need

We’d expect that you have significant experience working in IAM and are knowledgeable across many areas including Identity Governance & Administration, Identity Protection, Privileged Access Management, Authentication and Authorisation Protocols, as well as good experience understanding access configuration of key infrastructure. You'll likely have a number of security qualifications from organisations such as CompTIA or SANS/GIAC as well as other technical qualifications. We do welcome colleagues with diverse experience who can bring unique perspectives to any discussion.

What’s in it for you?

• Annual bonus scheme of up to 20% of base salary
• Holiday starting at 25 days plus a personal day (plus Bank holidays)
• Private medical insurance
• 26 weeks maternity and adoption leave (after 1 year’s service) at full pay, followed by 13 weeks of Statutory Maternity Pay or Statutory Adoption Pay, we also offer 6 weeks fully paid paternity leave
• Free 24/7 virtual GP service, Employee Assistance Programme (EAP) for you and your family, free access to a range of experts to support your mental wellbeing

About Us

Our vision at Tesco is to become every customer’s favourite way to shop, whether they are at home or out on the move. Our core purpose is ‘Serving our customers, communities and planet a little better every day’. Serving means more than a transactional relationship with our customers. It means acting as a responsible and sustainable business for all stakeholders, for the communities we are part of and for the planet. We are proud to have an inclusive culture at Tesco where everyone truly feels able to be themselves. At Tesco, we not only celebrate diversity, but recognise the value and opportunity it brings. We’re committed to creating a workplace where differences are valued, and make sure that all colleagues are given the same opportunities.

We’re proud to have been accredited Disability Confident Leader and we’re committed to providing a fully inclusive and accessible recruitment process. For further information on the accessibility support we can offer, please click here. We’re a big business and we can offer a range of diverse full‑time & part‑time working patterns across our many business areas, which means that we can find something that works for you. We work in a more blended pattern – combining office and remote working. Our offices will continue to be where we connect, collaborate and innovate.

If you are applying internally, please speak to the Hiring Manager about how this can work for you – Everyone is welcome at Tesco.