IAM / PAM Support Analyst

Apex Group Ltd


Date: 14 hours ago
City: Cape Town, Western Cape
Contract type: Full time
The Apex Group was established in Bermuda in 2003 and is now one of the world’s largest fund administration and middle office solutions providers.

Our business is unique in its ability to reach globally, service locally and provide cross-jurisdictional services. With our clients at the heart of everything we do, our hard-working team has successfully delivered on an unprecedented growth and transformation journey, and we are now represented by over circa 13,000 employees across 112 offices worldwide.Your career with us should reflect your energy and passion.

That’s why, at Apex Group, we will do more than simply ‘empower’ you. We will work to supercharge your unique skills and experience.

Take the lead and we’ll give you the support you need to be at the top of your game. And we offer you the freedom to be a positive disrupter and turn big ideas into bold, industry-changing realities.

For our business, for clients, and for you

The Role

As an IAM/PAM Analyst, you will support our global identity governance programme with a focus on user access reviews, leaver reporting, and access lifecycle activities. You’ll work closely with system owners, business stakeholders, and compliance teams to ensure our access controls are secure, audit-ready, and aligned with best practices.

Key duties and responsibilities:

User Access Reviews & Access Governance

  • Assist with user provisioning and de-provisioning tasks across systems and applications in line with access control policies
  • Support monthly and quarterly User Access Reviews (UARs) to validate entitlements across applications and domains
  • Liaise with system and business owners to complete certifications and implement remediation actions
  • Maintain accurate user and role records, ensuring changes are properly documented and auditable
  • Track and store evidence for access certifications to support audit and compliance requirements
  • Escalate delays, data inconsistencies, or access-related risks to relevant stakeholders

Leaver Management & Reporting

  • Help consolidate leaver data from multiple systems and sources
  • Support weekly reporting activities for management and compliance teams
  • Flag discrepancies and assist in closing data gaps

Privileged Access Support

  • Assist in managing privileged accounts in CyberArk and support day-to-day PAM operations.
  • Help with onboarding new privileged accounts and configuring access permissions as per defined policies.
  • Monitor privileged session activity and report any anomalies or access violations. Support regular reviews of privileged accounts to ensure compliance with internal security policies.

Operational Support & Documentation

  • Help troubleshoot basic access-related issues and raise/escalate as needed.
  • Maintain and update documentation related to access management processes.
  • Work with senior team members to implement access control improvements and support audit readiness.
  • Manage and respond to day-to-day queries via email and ServiceNow
  • Assist in privileged account onboarding and CyberArk operations
  • Support ad-hoc audit queries and evidence requests
  • Identify and propose small improvements to drive operational efficiency

Collaboration

  • Engage with global teams to help address access management requests and queries.
  • Support knowledge-sharing across IT teams regarding access policies and best practices

Experience and Knowledge:

  • 1–3 years of experience in IT, Information Security, or Identity & Access Management.
  • Understanding of access control concepts (least privilege, role-based access control, etc.).
  • Strong attention to detail and willingness to learn complex systems.
  • Ability to follow processes and adhere to security standards.
  • Good communication skills and ability to collaborate in a global, multicultural environment.
  • Basic troubleshooting and documentation skills.
  • A proactive attitude and interest in building a career in cybersecurity.
  • Exposure to access reviews, audit processes, or identity platforms (e.g., Active Directory, ServiceNow, CyberArk) is a plus
  • Willingness to learn and take ownership of tasks end-to-end

What you will get in return:

  • Exposure to a global enterprise security environment and a chance to be part of a growing, diverse, and agile security team.
  • Hands-on experience with leading IAM/PAM tools and practices and exposure to a global IAM programme across 40+ systems
  • Professional development opportunities and support for certifications.
  • A supportive and positive work culture with career growth potential.
  • Opportunity to contribute to real-world GRC initiatives and audits
  • Upskilling on enterprise tools like CyberArk, Microsoft Entra, and ServiceNow
  • Mentorship and structured feedback from experienced team members
  • A voice in process improvements and access governance maturity

Additional information:

We are an equal opportunity employer and ensure that no applicant is subject to less favourable treatment on the grounds of gender, gender identity, marital status, race, colour, nationality, ethnicity, age, sexual orientation, socio-economic, responsibilities for dependents, physical or mental disability. Any hiring decision are made on the basis of skills, qualifications and experiences.

We measure our success as a business, not only by delivering great products and services and continually increasing our assets under

administration and market share, but also by how we positively impact people, society and the planet. For more information on our commitment to Corporate Social Responsibility (CSR) please visit https://theapexgroup.com/csr-policy/

If you are looking to take that next step in your career and are ready to work for a high performing organization, alongside talented people who take pride in delivering great results, please submit your application (with your CV, cover letter and salary’s expectations).

Disclaimer: Unsolicited CVs sent to Apex (Talent Acquisition Team or Hiring Managers) by recruitment agencies will not be accepted for this position. Apex operates a direct sourcing model and where agency assistance is required, the Talent Acquisition team will engage directly with our exclusive recruitment partners.
Post a CV