Access Management Analyst in Bridgend

Reporting to: Access Management Lead

Direct Reports: None

Position Type: Permanent, full-time, Monday-Friday, minimum 3 days in the office.

Overview:

Why Tokio Marine HCC? Standing still is not an option in the current world of Insurance. TMHCC is one of the world’s leading Specialty Insurers. With deep expertise in our chosen lines of business, our unparalleled track record and a solid balance sheet, TMHCC evaluates and manages risk like no one else in the industry. Looking beyond profit, empowering our people and delivering on our commitments are at the core of our customer values, along with a desire to grow and provide creative and innovative solutions to our clients.

About Operations: Operations sits at the heart of TMHCC, we ensure the smooth running of all business processes – from policy administration and claims handling to data, technology, and delivery. We focus on driving efficiency which enables our teams across the business to deliver exceptional results every day. Our value statement: Ops makes it happen. Operations is made up of 7 functions, this role sits within: IT. We are the foundation for TMHCC’s success - enabling the business to grow, compete, and innovate through technology, security, and solution design. From shaping strategy to delivering resilient operations, we ensure every capability is aligned to business value. Our inclusive and collaborative culture empowers everyone to explore ideas, solve meaningful challenges, and build fulfilling careers that make a real impact.

Job Purpose: The Access Management Analyst is a hands-on role within a developing service. Alongside reliable day-to-day access delivery, you will help introduce, embed and mature the controls that ensure employees, contractors and third-party users have appropriate, timely and secure access to systems, applications and data. This is more than a transactional provisioning role. You will help develop and operationalise segregation of duties, complete the rollout of role-based access control across priority business areas, and improve joiner, mover and leaver controls, application access reviews and application onboarding. You will also help move manual or inconsistent processes into controlled ServiceNow workflows, working across IT, Human Resources, Audit, Compliance, Enterprise Risk, project teams and the wider business. The role would suit an experienced Access Management or Identity and Access Management analyst who enjoys solving control problems, improving services and taking ownership. It offers broad experience across access governance, service management, tooling, assurance and change delivery in a complex international organisation.

Key Responsibilities:

• Access Operations and Lifecycle Controls: Process access requests, changes and removals accurately and within agreed service levels, ensuring approvals, evidence and policy requirements are met. Support the end-to-end joiner, mover and leaver control framework, investigating exceptions and helping to strengthen the mover process. Administer and troubleshoot access through Windows Active Directory groups and application-specific access models, escalating complex or high-risk matters appropriately. Maintain clear records and support timely resolution of failed, overdue or incomplete access activity.
• Access Governance and Assurance: Coordinate application access reviews, working with application owners and business reviewers to complete attestations, track decisions and evidence remediation. Help develop and operationalise a consistent segregation of duties process, including identifying role conflicts, supporting risk review and approval routes, tracking remediation and maintaining clear evidence and reporting. Maintain access control matrices, role definitions, procedures, knowledge articles and supporting evidence so that controls are clear, current, and audit ready. Support internal and external audit, compliance and assurance activity by gathering evidence, investigating findings, and completing agreed improvement actions.
• Service Improvement and Change Delivery: Take ownership of Access Management problems and improvement initiatives from initial analysis through implementation, identifying root causes, gathering requirements, evaluating options and driving agreed solutions through to completion. Analyse existing processes and controls, working with business and technical stakeholders to define requirements, design practical improvements, coordinate testing and implementation, and confirm that changes achieve the intended outcome. Play an active role in completing the rollout of role-based access control across priority business areas by mapping job profiles, business roles, applications and access requirements, supporting validation and testing, and producing maintainable role documentation. Support the onboarding of applications into the access review platform, gathering technical, ownership, support and control information, and helping to establish a sustainable operating model. Improve ServiceNow access catalogue items, forms, workflows, knowledge and reporting, including the migration of manual or legacy request routes into controlled workflows. Represent Access Management in projects and Service Transition activity, helping to ensure access models, approvals, support ownership, documentation and training are ready before go-live. Use service data, control exceptions, audit findings and recurring issues to identify where Access Management processes need to mature, and design, document and embed practical improvements alongside day-to-day delivery.
• Stakeholder Engagement: Build effective relationships with IT teams, application owners, control functions and business stakeholders, communicating technical and control requirements in clear, practical language. Proactively identify issues, risks or control gaps, bring them to the attention of the wider team, and take ownership of coordinating and driving appropriate actions through to resolution where required, maintaining clear progress updates and documentation. Share knowledge with colleagues and contribute to a resilient team service with consistent standards and effective operational cover.

Skills and Experience Specification:

Essential:

• Relevant experience in Access Management, Identity and Access Management, IT security or IT operations, including practical responsibility for user access controls.
• Practical understanding of joiner, mover and leaver processes, role-based access control, application access reviews and access provisioning controls.
• Experience administering users and groups in Windows Active Directory and working with application-specific access models.
• Strong analytical and problem-solving skills, with experience investigating operational issues, access control gaps and recurring problems, identifying root causes and driving actions through to clear, documented resolution.
• Experience gathering and analysing requirements from business and technical stakeholders and translating them into practical process, control or system improvements.
• Ability to assess and document current-state processes, identify control gaps and inefficiencies, and define clear requirements for improved future-state processes.
• Good understanding of the importance of approvals, least privilege, segregation of duties, traceability and audit evidence.
• Demonstrated ability to take ownership of defined problems or improvement initiatives, structure the work required, coordinate stakeholders and actions, and drive delivery from initial analysis through to implementation.
• Experience working with service management or workflow tools, preferably ServiceNow.
• Strong analytical, problem-solving, and organisational skills, with sound judgement and close attention to detail.
• Clear communication skills and the confidence to work with technical teams, application owners, business stakeholders and control functions.
• Strong organisational skills and attention to detail, with the ability to manage competing operational and change priorities while maintaining ownership of delivery.

Desirable:

• Experience contributing to role-based access control delivery, segregation of duties process development, application onboarding or wider access-control improvement projects.
• Experience in a regulated organisation, ideally specialty insurance or the Lloyd's market.
• Awareness of relevant good practice and control frameworks, such as ITIL, ISO 27001, the NIST Cybersecurity Framework or Cyber Essentials.
• A relevant professional qualification or evidence of continued development in Identity and Access Management, cyber security, audit or IT service management.

What We Offer: The Tokio Marine HCC Group of Companies offers a competitive salary and employee benefit package. We are a successful, dynamic organization experiencing rapid growth and are seeking energetic and confident individuals to join our team of professionals. The Tokio Marine HCC Group of companies is an equal opportunity employer.

Please visit www.tmhcc.com for more information about our companies.