Lead QA & Control Analyst - IAM / JML

Talent500 is hiring for one of its clients.

Who are we:

Core Insurance Platforms (CIP) is Zurichs global capability responsible for building, running, and evolving core insurance technology. We set a unified, scalable operating model—covering governance, standards, architecture, service delivery, and reuse—so our business units can deliver at speed and scale.

CIP is the strategic steward of Zurichs Guidewire ecosystem, aligning platform roadmaps to business strategy while driving stability, modernization, reduced supplier dependency, and long term cost efficiency.

India delivery center is one of our global delivery and capability hub. We bring together experts in AI, engineering, analysis, quality, and architecture to deliver product & process solutions, application run services, change and transformation initiatives, and centralized platform services across both on prem and Guidewire Cloud environments. Our teams operate from multiple global delivery centers, supporting Zurichs business units worldwide.

A detail-oriented Quality Assurance & Control Analyst to support the APAC Identity & Access Services function.

The role is responsible for performing quality assurance reviews across Identity & Access management activities, supporting audit and control evidence preparation, maintaining control reporting discipline, and helping ensure access governance processes remain effective, traceable and audit ready.

This position plays an important role in sustaining the quality and consistency of access control operations across provisioning, termination, recertification, shared mailbox activity, stale-account governance, and audit/control support workstreams.

Supports local Business Units and / or performs regional duties, such as IT Owners and contact person or other stakeholders.

Projects:

• Leading and coordinating projects which requires information security & IAM participation for success.

Additional responsibilities:

• Supports the delivery of solutions that protect information resources against unauthorized disclosure, modification or loss.
• Assist in the rapid execution of information security initiatives by maintaining an appropriate level of prioritization, focus and persistence in an environment of significant change and growth.
• Ensure that project objectives are delivered on time and meet stakeholder expectations for quality.
• Provide consistent follow-through with the Business Manager and IT Project manager on issues/concerns to ensure appropriate visibility and escalation where needed.
• Must be able to manage project task execution independently and get all associated team members to deliver their tasks on time, without direct authority.
• Provide quality subject matter expertise,
• Assess the quality process of applications and infrastructure using a variety of assessment tools and methodologies.

QUALIFICATIONS/EXPERIENCE:

• University degree or equivalent experience.
• 3-5 years in Information Technology / IT Operations / IT Quality Assurance, Information Security or equivalent positions.
• Ability to operate using consulting and influencing skills, and able to
• communicate security-related and quality assurance concepts to a broad range of technical and non-technical staff.
• Ability to be a change agent to transform and enhance capabilities to meet current and future business drivers.
• Certifications e.g. ITIL, CISA, Security+ is a plus but not mandatory

Hands on experience:

• IT operations, systems development, IT security, IT risk management frameworks and standards, IT compliance, IT security incident, Quality Assurance
• IAM Access Control Principles (JML, Access Review, RBAC)
• Data Science & Analysis techniques using Excel (Basic, Intermediate) PowerShell Scripting (Basic) and Python (Basic)
• Adapt automation initiative and tools using modern Agentic AI to ease quality assurance review workloads.

KEY TASKS & ACCOUNTABILITIES:

Key responsibilities:

Quality Assurance & Control:

• Operates one or more Access Services in a location or region in boundaries with the service description and the agreed SLAs. This includes:
• Develop Quality Assurance strategy for Access Services to benchmark service quality
• Review and recommend areas for improvement to ensure overall quality of service delivered to business
• Tracking and implementing improvement initiatives
• Provide auditing and control services involving
• Prepare audit evidence and validate for accuracy before providing to requestors
• Walkthrough sessions and testing explanation
• Control remediation and improvements
• Advice from experience of delivery on quality assurance requirements for new systems during the system onboarding phases and makes recommendations for implementing quality measurements into new and existing access control processes.

Service Product Operations & Management:

• Support implementation of changes to processes and systems.
• Supports creation of appropriate documentation, implementation and communication of established policy, procedures and operating standards for service/product.
• Train users and coach team members.

Security Process & Improvements:

• Support Reviews of existing security systems and recommend improvements in such areas as the Access Services team operates.
• Introduce value added automation and utilizing approved AI solutions for ethical use in operations

RELATIONSHIPS:

• Internal relationships should focus on matrix relationships where required for this role.

Internal:

• Digital Identity – APAC Access Services
• APAC IT Services (local, regional and global)
• Group Technology Operations

External:

• Risk Officers
• Compliance Officers
• Privacy Officers
• Information Security
• Corporate Investigation units
• Supplier Management
• Security vendors

OTHER REQUIREMENTS:

Upskilling in Information Security or Identity & Access Management courses specified by management. Completed any of Microsoft certifications. Eg.

• Microsoft Azure Fundamentals AZ900
• Microsoft Security, Compliance & Identity Fundamentals SC900
• Microsoft Power Platforms Fundamentals PL900

TECHNICAL SKILLS:

• Self-driven personality and willing to learn new products and services.
• Knowledge in IT Operations, Security techniques and procedures and IS Audit.
• Is a team player.
• Knowledge of project management tools and techniques and can apply these skills in direct and virtual teams.
• Executes in priorities and due dates set by his/her supervisor.
• Knowledge of contemporary hardware, software and network architectures and how security policy can be implemented within these architectures.
• Good oral and written communication skills.
• Developed customer service skills, ease and rapport with people.
• Knowledge of companys vision, organizational structure, culture, philosophy, operating principles, values & code of ethics.
• Basic knowledge and understanding of the company, our market, and competitors.
• Delivers reliable and consistent results.
• Strong analytical and customer service skills
• Strong problem-solving skills
• Ability to grasp new technical concepts and technologies
• English language proficiency