IAM Analyst

We are currently seeking an IAM Analyst to join our growing Information Security & Risk team. The successful candidate will have the opportunity to help take Addepar’s Internal Identity & Access Management program to the next level. In this role, this person will work as part of the internal Identity & Access Management (IAM) function to improve the overall security posture of the organization.

Applicants must have, and maintain, the right to work in the United Kingdom from the first day of employment. Please note that visa sponsorship is not available for this role.

What You’ll Do

• Provide operational support for IAM related administration tools:

• Application onboarding and role definitions
• Recertification campaigns based on security and audit requirements
• Handling end user escalations and support requests

Assist with improving the overall maturity of the internal IAM program:

• Analyze, design, and implement improvements to data quality and role decisions across integrated systems.
• Governance Initiatives, such as Entitlement Reviews and proper inventory management of identities
• Enhancing IAM posture including human and non-human identities.
• Continually improve the IAM practice through platform enhancements, user process improvements and identity risk assessments.

Analyze access requirements, system flows, and security policies to enforce a strict Least Privilege access model while balancing user experience.

Design and implement scalable processes and/or technologies to improve the overall security posture of Addepar.

Assisting with the development and refinement of Information Security Policies & Standards.

Partner with the broader Security team to define the governance strategy and technical controls for Agentic AI Workflows, ensuring that autonomous agents and Non-Human Identities (NHIDs) operate within a secure, auditable, and least-privileged framework., 3.1 We collect various types of personal data about you for the purposes described in this Data Privacy Notice including, 5.2 We collect and process your personal data for purposes including:

(a) recruitment and selection including:

(i) to assess your suitability to work for us including short listing, agreements and interviews;

(ii) to conduct pre-employment checks including verification of your identity, checking your legal right to work and checking references;

(iii) to conduct a pre-employment reference check, financial sanction check and a check in relation to suspect criminal activities in order to prevent crime and other unlawful acts and to protect the business and clients in the financial services industry from the risk of dishonesty, malpractice or improper conduct;

(iv) to compare you with other applicants and make a decision whether to offer you employment;

(v) to consider any reasonable adjustments either for the recruitment process or if you were to commence employment with us in the event you have a disability;

(vi) to make a job offer and provide a contract of employment;

(vii) to prepare to bring you on board as an employee where you accept an offer of employment from us. In this case we will customise to make sense of the information gathered during recruitment for the purpose of your employment and will transfer some of this to our employment systems and files;

(viii) to contact you if you are not successful should another potentially suitable vacancy arise during the six months following the completion of the recruitment process for the role you applied for; and

(ix) to deal with any query, challenge or request for feedback received in relation to our recruitment decision;

(b) protecting the private, confidential and proprietary information of the Company, its employees, its clients and third parties;

(c) monitoring programmes to ensure equality of opportunity and diversity with regard to personal characteristics protected under applicable anti-discrimination laws;

(d) to enforce our legal rights and obligations, and for any purposes in connection with any legal claims made by, against or otherwise involving you;

(e) to comply with lawful requests by public authorities (including without limitation to meet national security or law enforcement requirements), discovery requests, or where otherwise required or permitted by applicable laws, court orders, government regulations, or regulatory authorities (including without limitation data protection, tax and employment), whether within or outside your country; and

(f) for other purposes permitted by applicable laws, including legitimate interests pursued by the Company where these are not overridden by the interests or fundamental rights and freedoms of applicants and where these have been explained to you before the relevant data is collected or the processing is carried out.

5.3 Special categories of data may be collected and processed by the Company for the following purposes:

(a) documentation such as work permits, details of residency, proof of citizenship will be processed to assess and review eligibility to work for the Company in the jurisdiction in which you work; and

(b) your racial or ethnic origin, sexual orientation or disability status may be used for the collection of statistical data subject to local laws, or where required to record such characteristics to comply with equality and diversity requirements of applicable local legislation or to keep the Company’s commitment to equal opportunity under review.

5.4 Additional information regarding specific processing of personal data may be notified to you., (a) Whenever the Company processes your personal data we do so on the basis of a lawful condition for processing. Processing of special categories of data is always justified on the basis of an additional lawful condition as described in section 6.2 below.

(b) In the majority of cases, the processing of your personal data will be justified on one of the following bases:

(i) we will process your data where the processing is necessary for the performance of a contract to which you are a party or in order to take steps at your request prior to entering into such a contract; or

(ii) where the above grounds do not apply we may process your personal data where the processing is necessary for the legitimate interests pursued by the Company (being those purposes described in the section above), except where such interests are overridden by your interests or fundamental rights and freedoms which require protection of personal data.

6.2 Special categories of data

(a) The special categories of personal data that may be processed by the Company are set out in this Data Privacy Notice. Where we process special categories of data it will be justified by a condition set out at paragraph 6.1(b) above and also by one of the following additional conditions:

(i) the processing is necessary for the purposes of carrying out the obligations and exercising the rights of you or the Company in the field of employment law, social security and social protection law, to the extent permissible under applicable laws;

(ii) the processing is necessary for the purposes of preventive or occupational medicine, for the assessment of your working capacity, medical diagnosis, the provision of health or social care or treatment or the management of health or social care systems and services, to the extent permitted by applicable laws;

(iii) the processing is necessary to protect your vital interests or of another person where you are physically or legally incapable of giving consent (for example in exceptional emergency situations, such as a medical emergency);

(iv) the processing is necessary for purposes authorised by applicable law. This includes:

(A) where the processing is necessary for the purposes of identifying or keeping under review the existence or absence of equality of opportunity or treatment; and

(B) where the processing is necessary for complying with regulatory requirements that involve taking steps to determine whether an individual has committed an unlawful act or has been involved in dishonesty, malpractice or other serious misconduct.

(v) the processing is necessary for the establishment, exercise or defence of legal claims.

6.3 Processing data relating to criminal convictions and offences

• Personal data relating to criminal convictions and offences will only be processed where authorised by applicable laws. For example, a criminal record check may be carried out on recruitment., 10.1 From time to time your personal data (including special categories of personal data) will be transferred to associated companies of the Company to process for the purposes described in this Data Privacy Notice. This will be applicable for example where the relevant company or a manager from that company is responsible for conducting or approving the relevant process or the data is part of a global directory where other individuals need to have access. These associated companies or managers are located elsewhere in the world (for example, Addepar, Inc. located in the United States or Addepar Canada, Inc. located in Canada).

10.2 Personal data may also be transferred to third parties (e.g. service providers, such as Greenhouse, as set out above), who may have systems or suppliers located outside the European Union.

10.3 As a result, in some circumstances your personal data will be transferred to countries outside of the UK whose data protection laws may be less stringent than in the UK.

10.4 In such, cases, the Company will comply with applicable legal requirements and will only transfer your personal data if:

(a) The country to which the personal data will be transferred has been recognised as providing an adequate level of protection for personal data; or

(b) We have put in place appropriate safeguards in respect of the transfer, for example the controller to controller or controller to processor Standard Contractual Clauses.

• Extensive hands-on Identity & Access Management experience with a track record of solving diverse access challenges.
• Bachelor’s degree/equivalent or higher. Computer Science or Engineering related education preferred.
• Experience with Identity & Access Management tools.
• Familiar with IT Governance and Compliance functions, including SOC2 and Data Governance.
• An understanding of Non Human Identities (NHIs) and the unique challenges within an information security setting.
• Attention to details and analytical skills.
• Curious, always learning and deeply interested in Information Security.
• Ability to build strong relationships and work collaboratively with internal and external partners.
• Excellent verbal and written communication skills with the ability to build strong relationships with internal stakeholders and external partners.

Desired Technical Skills:

• Hands-on experience with IGA tools such as C1, Saviynt, or similar enterprise-grade solutions.
• Experience working with IAM related systems such as Identity Providers (IdP), Multi-Factor Authentication (MFA), Zero Trust Access (ZTA) and Privileged Access Management (PAM) platforms.
• Familiarity with ‘Source of Truth’ integrations (e.g. Workday/BambooHR) for automated onboarding/offboarding.
• Hands-on experience with Amazon Web Services (AWS) or similar cloud platform and strong understanding of IAM related policies and configurations.
• Experience with Okta and Google Workspace environments.
• Experience with Infrastructure as Code tools such as Terraform.

Select… Are you 18 years of age or older?* Select… LinkedIn Profile Job Applicant Data Privacy Notice* Select…

Addepar is a global data and AI platform empowering investment professionals to turn complex financial information into actionable intelligence. Addepar unifies portfolio, market and client data in a total portfolio view and delivers AI-powered insights within investment and client workflows. More than 1,500 firms in 60 countries use Addepar to manage and advise on nearly $10 trillion in assets. Its open platform integrates with 650 software, data and consulting partners to power end-to-end investment operations across firms of all sizes and levels of complexity. Addepar supports clients worldwide with offices in New York City, Salt Lake City, São Paulo, London, Edinburgh, Geneva, Warsaw, Dubai, Pune and Singapore., * Act Like an Owner - Think and operate with intention, purpose and care. Own outcomes.

• Build Together - Collaborate to unlock the best solutions. Deliver lasting value.
• Champion Our Clients - Exceed client expectations. Our clients’ success is our success.
• Drive Innovation - Be bold and unconstrained in problem solving. Transform the industry.
• Embrace Learning - Engage our community to broaden our perspective. Bring a growth mindset.

In addition to our core values, Addepar is proud to be an equal opportunity employer. We seek to bring together diverse ideas, experiences, skill sets, perspectives, backgrounds and identities to drive innovative solutions. We commit to promoting a welcoming environment where inclusion and belonging are held as a shared responsibility.

We will ensure that individuals with disabilities are provided reasonable accommodation to participate in the job application or interview process, to perform essential job functions, and to receive other benefits and privileges of employment. Please contact us to request accommodation.

PHISHING SCAM WARNING: Addepar is among several companies recently made aware of a phishing scam involving con artists posing as hiring managers recruiting via email, text and social media. The imposters are creating misleading email accounts, conducting remote “interviews,” and making fake job offers in order to collect personal and financial information from unsuspecting individuals. Please be aware that no job offers will be made from Addepar without a formal interview process. Additionally, Addepar will not ask you to purchase equipment or supplies as part of your onboarding process. If you have any questions, please reach out to ta-operations@addepar.com., 1.1 In this Data Privacy Notice the terms the “Company”, “we”, “us” and “our” are references to Addepar UK Ltd., company number 13162730, having a registered address at Clifton House, Bunnian Place, Basingstoke, Hampshire, United Kingdom, RG21 7JE. Addepar UK Ltd. is part of the Addepar group of companies of which the ultimate parent is Addepar, Inc.

1.2 Addepar UK Ltd. will be the data controller of your personal data. In addition, where processing of personal data is undertaken by other associated companies of the Company for their own independent purposes, these associated companies may be co-controllers of your personal data., 8.1 We share your personal data with Addepar, Inc., its affiliates and any of their employees where it is necessary to do so for any of the purposes described in this Privacy Notice.

8.2 The Company also shares personal data with service providers that perform services on our behalf, such as our recruitment platform provider, Greenhouse; background and education verification agencies; HR and recruitment service providers; accounting, payment and expense reimbursement providers; travel providers; and electronic signature providers. In accordance with applicable law, we have entered into legally binding agreements requiring our service providers to use and disclose personal data only as necessary to perform services on our behalf or to comply with applicable legal requirements.

8.3 In addition, we may disclose personal data about you (a) if we are required or permitted to do so by law or legal process, for example due to a court order or a request from a law enforcement agency, (b) when we believe disclosure is necessary or appropriate to prevent physical harm or financial loss, (c) in connection with an investigation of suspected or actual fraudulent or other illegal activity, and (d) in the event we sell or transfer all or a portion of our business or assets (including in the event of a reorganization, dissolution, or liquidation).