Access Management Analyst

Job Title: Access Management Analyst Reporting to: Access Management Lead Direct Reports: None Position Type: Permanent, full-time, Monday-Friday, minimum 3 days in the office. Overview: Why Tokio Marine HCC? Standing still is not an option in the current world of Insurance. TMHCC is one of the world’s leading Specialty Insurers. With deep expertise in our chosen lines of business, our unparalleled track record and a solid balance sheet, TMHCC evaluates and manages risk like no one else in the industry. Looking beyond profit, empowering our people and delivering on our commitments are at the core of our customer values, along with a desire to grow and provide creative and innovative solutions to our clients. About Operations Operations sits at the heart of TMHCC, we ensure the smooth running of all business processes – from policy administration and claims handling to data, technology, and delivery. We focus on driving efficiency which enables our teams across the business to deliver exceptional results every day. Our value statement: Ops makes it happen. Operations is made up of 7 functions, this role sits within: IT We are the foundation for TMHCC’s success - enabling the business to grow, compete, and innovate through technology, security, and solution design. From shaping strategy to delivering resilient operations, we ensure every capability is aligned to business value. Our inclusive and collaborative culture empowers everyone to explore ideas, solve meaningful challenges, and build fulfilling careers that make a real impact. Job Purpose: The Access Management Analyst is a hands-on role within a developing service. Alongside reliable day-to-day access delivery, you will help introduce, embed and mature the controls that ensure employees, contractors and third-party users have appropriate, timely and secure access to systems, applications and data. This is more than a transactional provisioning role. You will help develop and operationalise segregation of duties, complete the rollout of role-based access control across priority business areas, and improve joiner, mover and leaver controls, application access reviews and application onboarding. You will also help move manual or inconsistent processes into controlled ServiceNow workflows, working across IT, Human Resources, Audit, Compliance, Enterprise Risk, project teams and the wider business. The role would suit an experienced Access Management or Identity and Access Management analyst who enjoys solving control problems, improving services and taking ownership. It offers broad experience across access governance, service management, tooling, assurance and change delivery in a complex international organisation. Key Responsibilities: Access Operations and Lifecycle Controls • Process access requests, changes and removals accurately and within agreed service levels, ensuring approvals, evidence and policy requirements are met. • Support the end-to-end joiner, mover and leaver control framework, investigating exceptions and helping to strengthen the mover process. • Administer and troubleshoot access through Windows Active Directory groups and application-specific access models, escalating complex or high-risk matters appropriately. • Maintain clear records and support timely resolution of failed, overdue or incomplete access activity. Access Governance and Assurance • Coordinate application access reviews, working with application owners and business reviewers to complete attestations, track decisions and evidence remediation. • Help develop and operationalise a consistent segregation of duties process, including identifying role conflicts, supporting risk review and approval routes, tracking remediation and maintaining clear evidence and reporting. • Maintain access control matrices, role definitions, procedures, knowledge articles and supporting evidence so that controls are clear, current, and audit ready. • Support internal and external audit, compliance and assurance activity by gathering evidence, investigating findings, and completing agreed improvement actions. Service Improvement and Change Delivery • Take ownership of Access Management problems and improvement initiatives from initial analysis through implementation, identifying root causes, gathering requirements, evaluating options and driving agreed solutions through to completion. • Analyse existing processes and controls, working with business and technical stakeholders to define requirements, design practical improvements, coordinate testing and implementation, and confirm that changes achieve the intended outcome. • Play an active role in completing the rollout of role-based access control across priority business areas by mapping job profiles, business roles, applications and access requirements, supporting validation and testing, and producing maintainable role documentation. • Support the onboarding of applications into the access review platform, gathering technical, ownership, support and control information, and helping to establish a sustainable operating model. • Improve ServiceNow access catalogue items, forms, workflows, knowledge and reporting, including the migration of manual or legacy request routes into controlled workflows. • Represent Access Management in projects and Service Transition activity, helping to ensure access models, approvals, support ownership, documentation and training are ready before go-live. • Use service data, control exceptions, audit findings and recurring issues to identify where Access Management processes need to mature, and designand design, document and embed practical improvements alongside day-to-day delivery. Stakeholder Engagement • Build effective relationships with IT teams, application owners, control functions and business stakeholders, communicating technical and control requirements in clear, practical language. • Proactively identify issues, risks or control gaps, bring them