Privileged Access Management Analyst
Summary
Manage and secure privileged access systems using BeyondTrust to enforce security policies, support compliance audits, and reduce risks across Keyloop’s automotive technology platform.
Role Summary
The Privileged Access Management Analyst is responsible for supporting Keyloop’s Privileged Access Management processes, standards, and tooling, with a focus on BeyondTrust delivery and operations. This role ensures privileged access is controlled, monitored, and aligned to security standards, supports secure process design, and drives remediation activities across the organisation.
The analyst works closely with Security Engineering, SOC, IT, and business teams to onboard privileged accounts, manage PAM tooling, contribute to projects, and produce actionable reports and insights to enhance the overall security posture.
Key Responsibilities
PAM Delivery & Implementation
-
Support the delivery and rollout of Privileged Access Management capabilities using BeyondTrust.
-
Assist with discovery, onboarding, and configuration of privileged accounts, systems, and access workflows.
-
Support implementation of secure PAM processes across IT and business functions.
-
Ensure alignment of PAM processes with SOC 2, ISO 27001, PCI DSS, and other relevant compliance frameworks.
BeyondTrust Operations & Administration
-
Manage and optimise BeyondTrust PAM tooling, including credential vaulting, account onboarding, access workflows, session management, and reporting.
-
Ensure PAM tooling is configured, updated, and integrated with relevant IT and business systems.
-
Provide guidance and support to teams in the use of BeyondTrust and PAM processes.
-
Maintain operational runbooks, configuration standards, and support documentation.
Privileged Access Governance & Remediation
-
Manage privileged account discovery, ownership validation, and lifecycle tracking across systems and platforms.
-
Triage, prioritise, and track remediation of excessive, inappropriate, or unmanaged privileged access.
-
Collaborate with Security Engineering, SOC, IT, and business teams to ensure timely and effective remediation.
-
Produce reports on privileged access risks, trends, and control gaps for leadership and stakeholders.
Security Tooling & Operations
-
Manage and optimise PAM tooling and related identity and access controls.
-
Support integration of BeyondTrust with directories, ticketing tools, logging, monitoring, and identity platforms.
-
Ensure PAM tooling supports secure operations and effective control monitoring.
-
Provide guidance and support to teams in the use of PAM tools and automation.
Reporting, Insights & Remediation
-
Produce reports and dashboards on privileged access posture, onboarding progress, access review outcomes, and remediation status.
-
Translate PAM data into actionable insights for Security Engineering, IT, and business stakeholders.
-
Track operational metrics, risks, exceptions, and control gaps through to resolution.
-
Support leadership reporting by providing clear updates on PAM delivery, adoption, and operational performance.
Compliance & Audit Support
-
Support internal and external audits by providing PAM evidence, access review outputs, and process documentation.
-
Ensure PAM activities support compliance with frameworks such as SOC 2, ISO 27001, PCI DSS, and other relevant requirements.
-
Assist in maintaining evidence of privileged access controls, approvals, exceptions, and remediation activities.
-
Contribute to continuous alignment of PAM operations with regulatory, customer, and business expectations.
Continuous Improvement
-
Stay current with PAM technologies, privileged access risks, identity security practices, and BeyondTrust capabilities.
-
Recommend improvements to tooling, processes, reporting, and user experience to enhance PAM maturity.
-
Contribute to the development of Keyloop’s security culture by promoting secure privileged access behaviours.
-
Support knowledge sharing and operational handover across security and IT teams.
Required Experience & Qualifications
-
3–5 years of experience in information security, identity and access management, infrastructure operations, or related roles.
-
Experience with Privileged Access Management tooling and operations, preferably BeyondTrust.
-
Exposure to account onboarding, credential vaulting, access workflows, privileged session management, and access reviews.
-
Experience supporting security projects and driving remediation initiatives.
Skills & Competencies
Technical Skills
-
Privileged Access Management policies, standards, and controls
-
BeyondTrust configuration, administration, and optimisation
-
Privileged account onboarding, credential vaulting, and session management
-
Access review, entitlement validation, and remediation tracking
-
Compliance frameworks and audit support
-
Reporting, metrics, and data-driven insights
Soft Skills
-
Strong analytical and problem-solving abilities
-
Effective communication and stakeholder management
-
Ability to work across technical and business teams
-
Detail-oriented with strong organizational and documentation skills
-
Proactive and adaptable in a dynamic environment
Education & Certifications (Preferred)
-
Bachelor’s degree in Information Security, Computer Science, IT, or related field
-
Relevant certifications such as CISSP, CISM, ISO 27001 Lead Implementer/Auditor, CompTIA Security+, or vendor-specific BeyondTrust training/certification
Values & Business Alignment
-
Demonstrates alignment with Keyloop’s values and ethical standards.
-
Understands Keyloop’s products, business objectives, and operational context.
-
Ensures PAM activities support business resilience, regulatory compliance, and secure delivery of services.
Skills
As published by lever · 10 questions · 7 written answers
Basics
Resume/CV, Full name, Pronouns, Email, Phone, Current location, Current company, LinkedIn URL, Twitter URL, GitHub URL, Portfolio URL, Other website, What is your age range?, I identify my ethnicity asSelect all that apply, What gender do you identify as?, Do you consider yourself to have a disability or be differently abled?, Were you previously employed by Armed Forces?
Short answers (1)
- Please confirm type of right to work document
Pick from a list (2)
- Are you currently authorised to work in the country of the job without any restrictions? optional
- Will you now or in future require visa sponsorship to work in country of the job optional
Written answers (7)
- What is your experience with AI Tools like Claude? optional
- Describe your typical week working with BeyondTrust — what's your involvement in access request approvals, session monitoring, or credential release? optional
- Walk me through how you'd conduct a quarterly privileged access review using BeyondTrust reporting. What reports or dashboards would you pull, and what would make an account 'flag' for removal? optional
- If BeyondTrust session recording shows a privileged user running unusual commands on a production server at 2am, what's your process from detection to escalation? optional
- Can you explain the difference between a 'Managed Account' and a 'Directory Account' in BeyondTrust, and when you'd use each? optional
- What KPIs or metrics have you reported on using BeyondTrust data — e.g., % of accounts under management, average approval time, orphaned account counts? How did you present that to stakeholders? optional
- What is your expected compensation Annually? optional