IAM Specialist, hybrid in Prague

We are looking for an experienced IAM Specialist to join an international cybersecurity and compliance project focused on NIS2 implementation, IAM governance, and access management optimization across enterprise environments.

Details:
Contract: B2B
Start: ASAP
Allocation: Full-time
Location: Prague, Czech Republic (occasional office visits)
Language: Czech and English required

Responsibilities:

• Analyze existing roles, access structures, and role conflicts across enterprise environments
• Define and implement Segregation of Duties (SoD) principles and incompatible role combinations
• Establish IAM governance framework, policies, and access management standards
• Define and implement IAM-related processes and controls (periodic access review processes)
• Collaborate with infrastructure, security, and application teams on IAM integrations and access governance topics
• Support user lifecycle management processes including onboarding, offboarding, and access reviews
• Review external provider access and generic/dummy account management processes
• Analyze excessive or overlapping access rights and participate in role design simplification
• Support audit, compliance, and evidence delivery activities related to IAM and NIS2 requirements

Requirements:

• Commercial experience with IAM, Identity Governance, or Access Management projects
• Strong understanding of IAM governance, RBAC models, Segregation of Duties (SoD), and access review processes
• Experience with enterprise role management and access control optimization
• Knowledge of Active Directory, Azure AD / Entra ID, SSO, MFA, and access governance principles
• Experience working in cybersecurity, compliance, audit, or regulated enterprise environments
• Ability to communicate with technical teams, security stakeholders, and business representatives
• Czech and English on communicative level
• Analytical mindset and ability to work independently in governance-focused environments

Nice to have:

• Experience with IAM governance or IGA tools (SailPoint, CyberArk, Okta, Ping Identity, or similar)
• Experience with NIS2, ISO 27001, SOX, or audit/compliance-related activities
• Scripting knowledge (PowerShell, Python, or similar)
• Experience with enterprise transformation or governance projects