Security Access Management Team Lead

BrainRocket·Poland·Удалённо, Офис·вчера

BrainRocket is a global company creating end-to-end tech products for clients across Fintech, iGaming, and Marketing. ‍Young, ambitious, and unstoppable, we've already taken Cyprus, Malta, Portugal, Poland, and Serbia by storm. Our BRO team consists of 1,300 bright minds creating innovative ideas and products. We don’t follow formats. We shape them. We build what works, launch it fast, and make sure it hits.

We are looking for an experienced Security Access Management Team Lead to join our Information Security team. This role combines hands-on access management expertise with team leadership responsibilities.

❗️ Important – On-Site Role❗️

This is an on-site position for our office in Poland, Warsaw.

Remote or hybrid arrangements are NOT available. Candidates must already be in the location or be willing to relocate. The relocation support will be provided if needed.

✅ Requirements

5+ years of experience in Information Security.
At least 1 year of experience in management as a Team Lead.
Strong understanding of IAM, PAM, RBAC, least privilege, and access governance principles.
Hands-on experience with access management processes, user lifecycle management and access reviews.
Experience working with SaaS platforms and reviewing third-party services from a security/access perspective.
Good knowledge of InfoSec principles, security policies, incident handling, and audit requirements.
Experience with SLA/KPI tracking and operational team management.
Strong problem-solving skills and the ability to make decisions in complex or urgent situations.
Excellent communication and stakeholder management skills.
Ability to document processes, prepare reports, and drive continuous improvements.

✅ Nice to Have

Experience with Microsoft Entra ID, Okta, or similar IAM tools.
Experience with Salespoint or other access governance platforms.
Information Security certifications such as ISO 27001, CISM or similar.

✅ Responsibilities

Lead and manage the Access Administration team, including daily operations, task distribution, prioritization, and performance monitoring.
Track and ensure compliance with SLA and KPI requirements.
Manage user access lifecycle processes, including creating, modifying, reviewing, and removing user accounts and permissions.
Ensure that appropriate access levels are granted to employees based on their roles, responsibilities, and business needs.
Implement, maintain, and improve RBAC principles and access control policies.
Conduct regular access reviews and audits to identify excessive, outdated, or inappropriate access rights.
Monitor user access activities across internal systems, SaaS platforms, and business applications.
Analyze and respond to access-related incidents, violations, and security risks.
Investigate potential threats and vulnerabilities related to access management processes.
Escalate complex incidents to relevant teams when needed and coordinate response actions.
Maintain accurate documentation of access management activities, incidents, decisions, and process improvements.
Prepare reports on access audits, incidents, SLA/KPI results, and team performance.
Review and assess third-party SaaS services from an access management and security perspective.
Ensure that Information Security principles, least privilege, and proper approval workflows are followed across the organization.
Support continuous improvement of IAM/PAM processes, tools, and internal procedures.