As part of the preparatory phase for compliance with NIS2, an IAM architect profile is required to assist STIB with the implementation of an IGA tool.

The desired function will be responsible for:

• Inventorying applications (mapping) and coordinating with application owners to document the authorization levels offered by these applications. The information collection must be structured and consolidated in a central repository. The role is to ensure coordination of contributors, actively enrich this deliverable, and guarantee its quality control and consistency.

• Coordinating, facilitating, and coaching workshops with business stakeholders to model access roles. The responsibility is to produce a coherent model validated by the business security officers.

• Formalizing and having validated the process for managing the access catalog. This includes onboarding, modifying, and decommissioning applications, managing business roles (RBAC), and managing automatic authorization rules (ABAC).

• Formalizing the eligibility criteria that new applications must meet: connectivity standards, security requirements, and guidelines. These documents are to be completed, validated, and published.

• Participating in the awareness of IAM guidelines among process stakeholders to ensure a smooth transition to the operationalization of the process.

The expected deliverables are therefore:

• A comprehensive access catalog

• A framework/process for onboarding/modifying a (new) application within the IGA

• Knowledge transfer

Additional information: The assignment may be extended for a maximum duration (including initial duration) of: 880 business days.