Analyst - Identity & Access Management

JOIN OUR SUNTORY GLOBAL SPIRITS FAMILY!

Suntory Global Spirits is a world leader in premium spirits with $5.5 billion in annual revenues and an ambition to become the World’s Most Admired Premium Spirits Company. We have a strong vision and strategy, an incredible brand portfolio grounded in quality and craftsmanship, an unwavering commitment to sustainability and top talent across the organization. Known for its craftsmanship of premium whiskies, including Jim Beam®, Maker's Mark®, Basil Hayden® and Knob Creek® bourbons; Japanese whiskies, including Yamazaki®, Hakushu®, Hibiki® and Toki™; and leading Scotch brands including Teacher's, Laphroaig® and Bowmore®, Suntory Global Spirits also produces leading IMFL brand Oaksmith in India.

We are focused on driving value across key priorities including American whiskey, Japanese Spirits, Scotch, Tequila and Ready-to-Drink. Headquartered in New York City, Suntory Global Spirits is a subsidiary of Suntory Holdings, which is world renowned for delivering quality and excellence across a range of products and categories.

For more information, on our brands and commitment to social responsibility, please visit www.suntoryglobalspirits.com and www.drinksmart.com.

What makes this a great opportunity?

Suntory Global Spirits is a world-class employer that develops talented, high-performing team members in a fast-paced, inclusive environment. Suntory Global Spirits and its parent company, Suntory Holdings in Tokyo, Japan, have received numerous awards, including recognition on Forbes’ list of “Best Midsize Employers” and Fortune magazine’s list of the “World’s Most Admired Companies.”

Suntory Global Spirits currently has the following position open: Identity & Access Management (IAM) Analyst. Working Hybrid (3 days in the Gurgaon office).

Within the Cybersecurity business unit, the IAM Analyst is responsible for supporting and administering enterprise Identity and Access Management (IAM), Identity Governance and Administration (IGA), authentication, authorization, and Privileged Access Management (PAM) solutions. This role ensures secure, compliant, and efficient access to enterprise systems and data using SailPoint, Microsoft Entra ID, CyberArk, and ForgeRock, while partnering with IT, Security, Audit, and business stakeholders.

Role Responsibilities

• Administer identity lifecycle management, joiner/mover/leaver (JML) processes, access provisioning, and access certifications using SailPoint IGA
• Manage user identities, groups, roles, entitlements, and conditional access policies in Microsoft Entra ID and on-premises Active Directory (AD)
• Support CyberArk Privileged Access Management (PAM) including privileged account onboarding, vaulting, access approvals, credential rotation, and session monitoring
• Administer ForgeRock for authentication, federation, single sign-on (SSO), and multi-factor authentication (MFA)
• Implement and enforce least privilege, role-based access control (RBAC), and segregation of duties (SoD)
• Perform periodic user access reviews, recertifications, and support internal and external audits
• Investigate, troubleshoot, and resolve IAM incidents, access requests, and escalations
• Partner with application owners to define access models, roles, and entitlement structures
• Maintain IAM documentation, standard operating procedures, and audit evidence
• Identify and access risks and recommend security control improvements

Qualifications

• Bachelor’s degree in information technology, Cybersecurity, Information Security, or related field (or equivalent experience)
• 3–5 years of experience in IAM, IGA, access management, or cybersecurity operations
• Hands-on experience with SailPoint, Microsoft Entra ID, and CyberArk
• Strong understanding of authentication and authorization protocols including SAML, OAuth 2.0, OpenID Connect (OIDC)
• Experience with Active Directory (AD), LDAP, and hybrid identity environments
• Experience supporting cloud and hybrid IAM architectures
• Scripting or automation experience using PowerShell and/or Python
• IAM or security certifications preferred (e.g., Security+, CISSP, Azure Security Certification)
• Strong analytical, troubleshooting, and technical documentation skills

Key Competencies

• Security-first and risk-aware mindset
• Strong time management, organization, and prioritization skills
• Ability to work independently and manage competing priorities
• Clear written and verbal communication with technical and non-technical stakeholders
• High attention to detail and commitment to compliance
• Effectively manage own workload, prioritize tasks, and meet deadlines across multiple IAM initiatives

WE BELIEVE IN EQUAL OPPORTUNITIES

At Suntory Global Spirits, people are our number one priority, and we believe our people grow together in diverse and inclusive environments where their unique insights, experiences and backgrounds are valued and respected. Suntory Global Spirits is committed to equal employment opportunity regardless of race, color, ancestry, religion, sex, national origin, sexual orientation, age, citizenship, marital status, disability, gender identity, military veteran status and all other characteristics, attributes or choices protected by law. All recruitment and hiring decisions are

based on an applicant’s skills and experience.

We welcome applications from all members of society irrespective of age, gender identity, disability, sexual orientation, race, religion, or belief. All recruitment and hiring decisions are based on an applicant's skills and experience. We will ensure that individuals with disabilities are provided reasonable accommodation to participate in the job application or interview process, and to perform crucial job functions. Please contact us if you require assistance.

In 2023, Suntory Global Spirits earned a top score in Human Rights Campaign Foundation’s 2023-2024 Corporate Equality Index and was a recipient of the Equality 100 Award: Leader in LGBTQ+ Workplace Inclusion.