Middle Information Security Access Specialist

GR8 Tech is seeking a Middle Information Security Access Specialist to scale, secure, and automate its user access management infrastructure, ensuring zero-trust integrity at high velocity. The role focuses on protecting the core IT ecosystem by managing the end-to-end employee access lifecycle, establishing standardized access profiles, and leveraging modern automation and AI-driven tools. The position requires meeting strict operational SLAs and security standards.

• Lead and optimise end-to-end employee lifecycle access workflows (Onboarding / Dismissal / Change Position), ensuring seamless access provisioning during onboarding, timely revocation upon offboarding, and structured access reviews during internal transfers or role changes.
• Own and govern the process of designing, standardising, and maintaining corporate Access Profiles across departments to align with least-privilege principles.
• Measure and track operational SLAs, proactively eliminating bottlenecks in the access request pipeline to maintain high customer satisfaction (CSAT).
• Optimise operational processes by driving access lifecycle automation and minimising manual intervention.
• Design, validate, and maintain role models (roles, sub-roles, permission sets, and Access Profiles) across corporate systems, continuously identifying and mitigating access anomalies.
• Initiate and define requirements for automated testing of role-model functionality and access controls across systems.
• Partner with Talent Department, IT, and engineering teams to onboard new corporate systems into the centralised Access Flow platform and align access profiles with organisational changes.
• Leverage AI agents and LLM-powered automation tools to optimise repetitive operational tasks, accelerate ticket analysis/triaging, and streamline documentation workflows.
• Process complex, escalated access tickets swiftly and securely, serving as a trusted gatekeeper for critical permissions.
• Analyse complex access rights data, identify permission inconsistencies, and resolve access drift across platforms.
• Build and maintain comprehensive internal documentation for SOPs, access profile matrices, role definitions, and access governance frameworks.

• 2+ years of hands-on experience in Information Security, IAM, or IT Operations / Systems Administration / L3 Support with a strong focus on access management (required).
• Proven experience managing Onboarding / Dismissal / Change Position workflows (required).
• Practical experience creating, standardising, and auditing Access Profiles and Role-Based Access Control (RBAC) models across corporate tools and systems (required).
• Strong technical understanding of enterprise identity and access tools (e.g., Okta, CyberArk, Active Directory, PAM, SSO, and federation protocols) (required).
• Understanding and practical experience with AI tools / AI agents (e.g., prompt engineering, AI copilots, or agentic workflows) to automate routine operational tasks, reporting, or data processing (required).
• Solid understanding of core access control principles: RBAC, ABAC, Principle of Least Privilege, and Zero Trust (required).
• SLA- and quality-driven mindset with experience managing high-volume operational requests without compromising security standards (required).
• Strong analytical skills with the ability to navigate and validate complex permission structures across diverse systems (required).
• Clear communication skills-ability to explain technical security policies and requirements to non-technical stakeholders (required).
• Fluency in Ukrainian or Russian (required).
• Intermediate+ level of English (required).
• Working knowledge of security compliance frameworks and audit requirements (PCI DSS, ISO 27001) in the context of access management and user access reviews (nice-to-have).
• Hands-on experience integrating AI agents or custom LLM workflows into internal IT/IAM automation pipelines (e.g., via APIs, LangChain, or agentic frameworks) (nice-to-have).
• Bachelor’s degree in Computer Science, Information Security, or a related technical field (nice-to-have).
• Experience configuring, managing, or troubleshooting custom Access Flow / IAM orchestration platforms (nice-to-have).
• Familiarity with cloud security concepts and identity governance within AWS, Azure, or GCP (nice-to-have).
• Relevant industry certifications (e.g., CompTIA Security+, Okta Certified Professional, Microsoft Identity and Access Administrator) (nice-to-have).

• Cafeteria - annual budget you allocate to: Sports, Medical, Mental health, Home office, Languages.
• Paid maternity/paternity leave + monthly childcare allowance.
• 20+ vacation days, unlimited sick leave, emergency time off.
• Remote-first + tech support + coworking compensation.
• Team events (online/offline/offsite).
• Learning culture with internal courses + growth programs.

GR8 Tech is a business-to-business iGaming software provider headquartered in Limassol, Cyprus, supplying sportsbook and casino platform technology to operators. It is the rebranded B2B arm of Parimatch Tech, spun out from the consumer Parimatch brand in 2023. The company's modular platform supports millions of active users across more than 40 countries, maintained by a team of over 900 specialists. GR8 Tech focuses on high-performance, scalable sportsbook and gaming infrastructure.

Read more about GR8 Tech →