Middle Information Security Access Specialist

About the role

This role focuses on enhancing information security by managing user access across corporate systems. The specialist will conduct regular audits to ensure compliance with PCI DSS and ISO 27001, validate and define role models, and identify access anomalies. A key aspect is translating complex compliance requirements into automated access workflows and onboarding new systems into a centralized Access Flow platform.

The position involves significant automation work, including deploying scripts in PowerShell or Bash to eliminate repetitive data analysis tasks. The specialist will also handle complex, escalated access tickets, acting as a gatekeeper for critical permissions. Success in this role requires a strong focus on operational SLAs, proactive bottleneck resolution, and maintaining high internal customer satisfaction.

Collaboration with cross-functional teams is essential for integrating new systems and ensuring smooth access management. The specialist will also be responsible for building and updating comprehensive internal documentation for procedures, role definitions, and access frameworks, contributing to the overall security posture and operational efficiency of GR8 Tech's iGaming platform.

Skills that matter here

• IT Security: This role involves enhancing overall information security measures and acting as a gatekeeper for critical permissions within the company's systems.
• IAM: The specialist will have hands-on experience with Identity and Access Management, including enterprise identity tools and core access control principles.
• PowerShell: This scripting language will be used to deploy automation scripts to eliminate repetitive data analysis tasks and automate identity workflows.
• Bash: This scripting language will be used to deploy automation scripts for repetitive data analysis and to automate identity workflows or security tasks.
• Python: Basic scripting skills in Python are required for automating identity workflows or security tasks.
• PCI DSS: The role requires conducting access audits to ensure compliance with PCI DSS requirements for payment card data security.

Who this role suits

• You have a background in IT Security, IAM, or related technical roles and are driven by operational efficiency through automation.
• You are meticulous about compliance, with an understanding of PCI DSS and ISO 27001, and can translate technical policies into clear steps.
• You thrive in an SLA-driven environment, handling high volumes of operational tickets without compromising security or accuracy.
• You are a clear communicator, able to collaborate with various teams and document procedures thoroughly.

From the employer

What you’ll drive:

• Strategy & outcomes: Enhance information security measures by conducting regular access audits for compliance with PCI DSS and ISO 27001 requirements.
• Measure and track operational SLAs, proactively fixing bottlenecks in the request pipeline to ensure high internal customer satisfaction.
• Participate in the optimization of operational processes by driving automation.

• Discovery & decisions: Validate and define role models across corporate systems, continuously identifying and correcting access anomalies or inconsistencies.
• Map and translate complex compliance and technical requirements into clean, automated access workflows.
• Partner with cross-functional teams to onboard new corporate systems into the centralized Access Flow platform.

• Delivery & execution: Deploy automation scripts (PowerShell, Bash) to eliminate repetitive data analysis tasks.
• Work with large volumes of data and utilize complex formulas within Google Spreadsheet.
• Process complex, escalated access tickets swiftly and securely, serving as the ultimate gatekeeper for critical permissions.
• Build and update comprehensive internal documentation for procedures, role definitions, and access frameworks.

What makes you a GR8 fit:

• Must-have:
• 2+ years of hands-on experience in IT Security, IAM, or related technical roles (QA/AQA, IT Operations/Systems Administration, L2/L3 Support with a similar scope of tasks).
• Strong technical mastery of enterprise identity tools (e.g., Okta, CyberArk, Active Directory, PAM, and SSO solutions).
• Basic scripting skills (Bash, PowerShell, or Python) explicitly used for automating identity workflows or security tasks.
• Basic understanding of the requirements of PCI DSS and ISO 27001.
• Deep understanding of core access control principles, RBAC structures, and authentication methods.
• SLA-driven mindset with a track record of handling high-volume operational tickets without compromising security or accuracy.
• Clear communication style—able to translate rigid technical security policies into clear, non-technical steps for internal users.
• Fluency in Ukrainian or Russian; Intermediate+ level of English.

• Nice-to-have:
• Familiarity with cloud security concepts and identity governance within AWS, Azure, or GCP.
• Experience configuring or troubleshooting custom Access Flow / IAM orchestration platforms.
• Relevant industry certifications (e.g., CompTIA Security+, Okta Certified Professional, or Microsoft Identity and Access Administrator).

Why you’ll love working here:

• Benefits: Cafeteria — annual budget you allocate to: Sports • Medical • Mental health • Home office • Languages.
• Work-life & support: Paid maternity/paternity leave + monthly childcare allowance. 20+ vacation days, unlimited sick leave, emergency time off. Remote-first + tech support + coworking compensation. Team events (online/offline/offsite). Learning culture with internal courses + growth programs.
• Our culture & core values: GR8_TECH culture is how we win — through trust, ownership, and a growth mindset. We move fast, stay curious, and keep it real, with open feedback, room to experiment, and a team that’s got your back. FUELLED BY TRUST: we’re open, honest, and have each other’s backs. OWN YOUR GAME: we take initiative and own what we do. ACCELER8: we move fast, focus smart, and keep it simple. CHALLENGE ACCEPTED: we grow through challenges and stay curious. BULLETPROOF: we’re resilient, ready, and always have a plan.