Security Access Control Analyst | Information Security BU | CIO Office | August 2026

Embark on a journey within our CIO Office and contribute in managing Security and Control Operations of MCB Ltd. and hosted entities.

By joining Information Security BU as Security Access Control Analyst, you will be called upon to administer, monitor and review user access rights across the Bank's applications and systems, ensuring compliance with access control policies, regulatory requirements and the Bank's risk appetite. The role performs access governance activities, access reviews, risk assessments and compliance checks to protect the Bank's information assets and mitigate risks arising from inappropriate or excessive access privileges.

We are on the lookout for:

Job Vacancy: Security Access Control Analyst

In this role you will:  

• Administer and monitor user access rights across the Bank’s systems and applications, ensuring alignment with approved access matrices, business responsibilities and security policies;

• Process access requests accurately and within agreed service level agreements, including timely execution of joiner, mover and leaver activities;

• Maintain accurate and up-to-date visibility of user privileges to prevent unauthorized access and misuse of access rights;

• Manage SWIFT certificates and ensure compliance with applicable SWIFT security requirements;

• onduct periodic access reviews, certifications, recertifications and risk assessments to confirm the appropriateness of user privileges;

• Identify, investigate and remediate access control gaps, excessive privileges, policy breaches and discrepancies between approved standards and actual system entitlements;

• Review baseline access roles, access policies and role-based access controls to ensure continued alignment with business needs and the Bank’s risk appetite;

• Produce and monitor access-related KPIs, KRIs and governance metrics to support risk oversight, compliance monitoring and management reporting;

• Collaborate with HR, Business Units, Application Owners and other stakeholders to maintain accurate access governance standards and provide guidance on access management requirements;

• Support business and technology projects by establishing appropriate access models and role-based access controls for new systems and applications;

• Maintain comprehensive documentation of access management processes, procedures, controls and frameworks, while providing the required evidence and remediation records for internal and external audits;

• Drive continuous improvement of access governance processes, ensuring ongoing compliance with regulatory, legal and security requirements while remaining informed of emerging cybersecurity threats and IAM best practices.

To succeed, you will be required to demonstrate the following competencies:

• Demonstrate technical and professional knowledge and skills related to the job and industry;

• Consistently achieve results, even under tough circumstances;

• Build partnerships and work collaboratively with others to meet shared objectives;

• Develop and deliver multi-mode communications that convey a clear understanding of the unique needs of different audiences;

• Learn through experimentation when tackling new problems, using both successes and failures as learning fodder.

We are looking for candidates who have a minimum of:

Either

• A Bachelor’s degree in Information Technology, Information Security, Computer Science or a related field;
• 2-4 years' experience in Identity & Access Management, Information Security, IT Risk or IT Operations.

Or

• A Diploma in Information Technology, Information Security, Computer Science or a related field;
• 4-5 years' experience in Identity & Access Management, Information Security, IT Risk or IT Operations.

And

• Knowledge of IAM principles, Role-Based Access Control (RBAC), Segregation of Duties (SoD) and access lifecycle management;
• Knowledge of banking systems and regulatory environments would be an advantage;
• Relevant certifications such as Security+, SC-900, SC-300, CISA, CIAM, CAMS or equivalent would be advantageous.

A combination of both qualification & experience will be considered.

Should this opportunity match your career aspirations, skills and competencies, click on ‘Apply’ to complete your online application.

Please ensure all required information is accurately entered in relevant sections. Any incomplete application will not be considered. Kindly attach a complete CV when applying.

As part of the recruitment process, candidates will be required to provide a valid Certificate of Character of less than 3 months and two professional references.

The deadline for submission of application is 07 September 2026.

Management reserves the right not to appoint anyone following this advert.