Do meaningful work with us. Every day.
At Amplify Health, we’re looking for individuals with ambition, resilience and passion for healthcare, insurance, wellness and digital technology. As a fast-growing business with the ambition of making people and communities across Asia healthier, we have exciting career opportunities available to help us achieve our vision.
The Associate, Cyber Security supports the secure and efficient administration of workforce identities and access across Amplify Health. The role executes identity lifecycle, access provisioning, governance, compliance, and operational support activities in line with approved controls and service levels. Working closely with application, platform, HR, and business teams, the position helps maintain accurate access, complete audit evidence, and effective least-privilege controls while contributing to continuous improvement across IAM operations.
Responsibilities
1) Identity Lifecycle Management
Perform joiner, mover, and leaver activities in accordance with approved IAM processes, control requirements, and agreed service levels.
Support end-to-end identity lifecycle management for workforce identities, including onboarding, role changes, transfers, and offboarding.
Execute access provisioning and deprovisioning requests across approved platforms, applications, and infrastructure services.
Maintain Active Directory group memberships and ensure access assignments are accurate, approved, and aligned to business requirements.
Ensure identity records, access attributes, and operational evidence are complete and traceable for audit and compliance purposes.
Monitor IAM operational queues and ensure access requests, incidents, and tasks are actioned accurately and within agreed timelines.
2) Access Governance & Compliance
Support role-based access control (RBAC) administration and identity compliance activities across business and technology platforms.
Administer entitlement management processes, ensuring access is granted based on approved access models, policies, and business justification.
Support Azure RBAC and cloud permission assignments, ensuring privileged and platform access is appropriately approved, documented, and reviewed.
Contribute to the design, maintenance, and enforcement of access models, policies, and standard operating procedures.
Assist in identifying segregation of duties conflicts and access control gaps, escalating risks and exceptions for review and remediation.
Support user access reviews, certification campaigns, and least-privilege remediation activities to strengthen access governance and audit readiness.
3) Operational Support & Continuous Improvement
Maintain IAM documentation, SOPs, runbooks, and evidence repositories to support consistent operations and audit requirements.
Support access exception tracking, remediation follow-ups, and periodic control reporting for management and compliance stakeholders.
Collaborate with application, platform, HR, and business teams to resolve identity and access-related issues.
Identify opportunities to standardise, automate, or improve IAM operational processes and access governance controls.
Candidate Profile
Experience and Qualifications
0–3 years of experience in IAM operations, identity administration, access governance, or related cybersecurity operations.
Hands-on experience with joiner, mover, and leaver processes, access provisioning, deprovisioning, and user access reviews.
Working knowledge of Active Directory, Microsoft Entra ID, Azure RBAC, AD groups, service accounts, and cloud or platform access controls.
Understanding of RBAC, least privilege, segregation of duties, entitlement management, and identity compliance principles.
Strong attention to detail, documentation discipline, and the ability to maintain accurate access records and audit evidence.
Relevant experience or training in IAM, Azure, ITSM, or cybersecurity are advantageous.
Competencies & Core Characteristics:
We are seeking a…