Skip to content
CV Rocket
Get started
How it worksThe enginePricingBlogContactSign in

Open nowPosted today

Identity and Access Management Analyst

tp110 open roles

Where
Manila
Get the CV for this job

From $25 per CV, paid once. No subscription.

Your applicationOpen nowIdentity and Access Management Analysttp · Manila

  1. YouYes, apply to this one.

  2. CV RocketCV written for this posting.

  3. 25 readersRecruiter, hiring manager, skeptic. Round after round.

  4. CV RocketApplied on tp's own form.

The reply lands in your private mailbox

3×more interviews than doing it yourself with ChatGPT.

The clock on this job

Early applications get read.

13.9% of postings close within 7 days. Measured by our own scanner across the market. tp postings stay open a median of 21 days.

Share of postings closed within
  1. 2.2%1 day
  2. 4.7%3 days
  3. 13.9%7 days
  4. 22.4%14 days
  5. 38.1%30 days
  6. 59.0%60 days
This job: posted today

tp median: 21 days open

The posting

Group Overview

The TP ICAP Group is a world leading provider of market infrastructure.

Our purpose is to provide clients with access to global financial and commodities markets, improving price discovery, liquidity, and distribution of data, through responsible and innovative solutions.

Through our people and technology, we connect clients to superior liquidity and data solutions.

The Group is home to a stable of premium brands. Collectively, TP ICAP is the largest interdealer broker in the world by revenue, the number one Energy &

Commodities broker in the world, the world’s leading provider of OTC data, and an award winning all-to-all trading platform.

Founded in London in 1866, the Group operates from more than 60 offices in 27 countries. We are 5,200 people strong. We work as one to achieve our vision of being the world’s most trusted, innovative, liquidity and data solutions specialist.

Role Overview

Information Security is seeking an experienced Identity and Access Management (IDAM) Engineer to design, implement, and enhance TP ICAP's identity, access management, and privileged access capabilities. The role is responsible for the engineering, integration, automation, and governance of identity services across on-premises, cloud, and SaaS environments, supporting strategic initiatives including Privileged Access Management (PAM), Identity Governance and Administration (IGA), Zero Standing Privilege (ZSP), and cloud entitlement management. Working closely with Security, Infrastructure, Cloud, Application Development, and Risk teams, the successful candidate will help ensure access is managed securely, efficiently, and in line with regulatory requirements.

Role Responsibilities

Access Operations

  • Manage and review user provisioning, deprovisioning, and access changes for internal systems, SaaS apps, and cloud platforms (e.g. AWS).
  • Maintain user and group roles in IAM tools (e.g. Delinea, AWS, CNAPP or similar).
  • Design, implement and maintain identity and access management solutions across on-premises, cloud, and SaaS platforms.

Identity Governance

  • Support periodic access reviews, certification campaigns, and policy enforcement.
  • Help define and maintain role-based access controls (RBAC) and attribute-based access models.
  • Assist in monitoring privileged access and enforcing just-in-time or least-privilege access.

Risk, Compliance & Reporting

  • Support internal and external audits, maintain control evidence, and produce reporting and metrics relating to access governance, certification, and compliance activities.
  • Support delivery of Identity Governance and Administration (IGA) capabilities.
  • Provide technical support for internal audits, regulatory reviews, and security assessments.

Collaboration & Improvement

  • Work closely with IT, Security, HR, and Cloud unit leaders to ensure smooth access onboarding and offboarding.
  • Assist in incident response where access misuse or anomalies are involved
  • Develop integrations, automation, reporting, and process improvements that enhance IAM services and operational efficiency
  • Develop integrations, automation, reporting, and process improvements that enhance IAM services and operational efficiency. Provide third-line support for IAM-related incidents and contribute to strategic identity initiatives.

Privileged Access Management

  • Design, implement and maintain Privileged Access Management controls across human and machine identities.
  • Support privileged account onboarding, credential rotation, session management, and privileged access workflows.
  • Implement and enhance Just-in-Time (JIT) and Zero Standing Privilege (ZSP) capabilities.
  • Support cloud privileged access governance and entitlement management across AWS, Azure, and SaaS platforms.
  • Monitor privileged access activity and investigate access-related security events.

Experience / Competences

Essential

  • Experience with IAM platforms (e.g., Okta, Delinea, Idira etc.)
  • Strong experience implementing and supporting Identity and Access Management technologies.
  • Strong understanding of IAM concepts including SSO, MFA, Federation, RBAC, ABAC, Privileged Access Management, Identity Governance, JIT and Zero Standing Privilege.
  • Experience with user lifecycle management and access provisioning processes
  • Experience with AWS Identity and Access Management and cloud-native security controls.
  • Knowledge of Information Security and risk standards and frameworks such as NIST 800-53, CIS benchmarks, OWASP, ISO-27001, SOC2 and COSO
  • Experience supporting access reviews or control audits (e.g., SOC 2, ISO 27001)
  • Extensive security engineering background
  • Knowledge of scripting or automation (e.g., PowerShell, Python, APIs)
  • Comfortable working across departments and documenting technical procedures

Desired

  • A degree in Computer Science or related field desirable but not essential
  • Prior experience in financial services is strongly preferred
  • Experience working with cloud entitlement management and cloud security technologies.

Job Band & Level

  • Professional / 5

#LI-Hybrid #LI-ASO

Not The Perfect Fit?

Concerned that you may not meet the criteria precisely? At TP ICAP, we wholeheartedly believe in fostering inclusivity and cultivating a work environment where everyone can flourish, regardless of your personal or professional background. If you are enthusiastic about this role but find that your experience doesn't align perfectly with every aspect of the job description, we strongly encourage you to apply. You may be the ideal candidate for this position or another opportunity within our organisation. Our dedicated Talent Acquisition team is here to assist you in recognising how your unique skills and abilities can be a valuable contribution. Don't hesitate to take the leap and explore the possibilities. Your potential is what truly matters to us.

Company Statement

We know that the best innovation happens when diverse people with different perspectives and skills work together in an inclusive atmosphere. That's why we're building a culture where everyone plays a part in making people feel welcome, ready and willing to contribute. TP ICAP Accord - our Employee Network - is a central to this. As well as representing specific groups, TP ICAP Accord helps increase awareness, collaboration, shares best practice, and holds our firm to account for driving continuous cultural improvement.

Location

Philippines - Ecoprime Building - Taguig City

From $25, paid onceGet the CV for this job

What happens when you press

One press. We do the rest.

  1. A CV for this posting

    Written against tp's own wording, from every piece of relevant proof in your profile.

  2. 25 readers review it

    Recruiter, hiring manager, skeptic and more read every draft, round after round. You get the best round.

    The review screen in CV Rocket: how each CV was read, round by round.

  3. We apply on tp's form

    Our application engine gets through the hardest forms there are. Where a question needs you, AI suggests the best answer. Don't want us applying from our IP addresses? Use our Chrome extension: we apply straight from your own browser.

    An application in CV Rocket: every answer filled in on the employer's form.

  4. Every reply, sorted

    tp's answer lands in your private mailbox, and we classify it on arrival: interview, question, rejection.

    The CV Rocket inbox: each employer reply classified as an interview, an action or a rejection.

  5. Reply with AI

    AI helps you write the email, checks it and sends it. We show you whether the recruiter read it.

  6. The interview in your calendar

    Full integration with your calendar. The invitation goes straight in.

    An interview invitation in the CV Rocket inbox, added to the candidate's calendar.
Get the CV for this job

From $25 per CV, paid once. No subscription.

Why it works

3×

more interviews than doing it yourself with ChatGPT.

ChatGPT writes a CV and never learns what happened to it. We see every reply. For each CV we know:

  • How it was written, and how the review scored it
  • When we applied, and how long after the posting went up
  • Which posting, which company, which city
  • Who got the interview, and who heard nothing

That is how we know which CVs get called.

Get the CV for this job

From $25 per CV, paid once. No subscription.

The numbers game

More applications. More interviews.

Every application goes out with its own CV, written for that posting and paid once. Send enough of them and the law of large numbers finds you the job.

Get the CV for this job
By hand5–10
With CV Rocket100
applications a day

Nearby

Live postings like this one

Same employer first, then the same role elsewhere.

Before you press

Straight answers

Get the CV for this job

From $25 per CV, paid once. No subscription.

What if my background isn't good enough?

We make the most of the background you have. The CV uses every piece of relevant proof your profile holds, and one of the 25 readers reads your whole profile and flags what the CV left out.

Do you really apply for me?

Yes, on the employer's own form, the hardest ones included. Where a question needs you, you answer it right there and AI suggests the best answer. Don't want us applying from our IP addresses? Use our Chrome extension: we apply straight from your own browser.

Is it a subscription?

No. You pay once per CV, from $25. Every application goes out with its own CV, written for that posting.

One job. One CV.
Paid once.

Pick the posting you want. We write for it, apply for you and catch the reply.

Get the CV for this job

From $25 per CV, paid once. No subscription.