IAM Analyst

At Trustpilot, we're on an incredible journey. We're a profitable, high-growth FTSE-250 company with a big vision: to become the universal symbol of trust. We run the world's largest open customer review platform, and while we've come a long way, there's still so much exciting work to do. Come join us at the heart of trust!

Join our Identity and Access Management (IAM) team within our broader technology department. In this role, you will work cross-functionally across Security, HR Ops, Privacy, and IT to manage critical access and secure resources enterprise-wide. We foster a healthy, transparent, and highly collaborative environment where you can work with state-of-the-art tech and leverage our AI investments to innovate in the IAM space.

As an Identity & Access Management Analyst, you will take ownership of the day-to-day disciplines that govern how colleagues access the systems they need. Working directly within the wider IT Operations and Identity & Access Management function, you will run the joiner, mover and leaver processes, handle incoming access requests, administer privileged access, and run and improve our access review programme, working with system owners to confirm who should have access, and with auditors to evidence that it is right. Your efforts will directly shape how quickly and securely our team members get the access required to do their best work.

This role needs both sides. You will configure access, troubleshoot sign-in issues and grow into application onboarding with Single Sign-On (SSO) and automated user provisioning (SCIM). Just as much of your week will be spent working with people: walking system owners through access reviews, agreeing who should have access to what, answering auditors' questions, and keeping HR Ops in step on starters and leavers. We are looking for someone who is as comfortable leading a conversation with a system owner or auditor. You will have support from senior team members on more complex work.

What You'll Be Doing

Access Administration & Ticketing : Serve as the operational contact for IAM ticketing, managing end-to-end user access lifecycles, including ticketing queues, approvals and access provisioning, while driving process improvements through automation.

Identity Lifecycle & Provisioning Management : Partner with HR Operations to oversee end-to-end Joiner, Mover, and Leaver (JML) workflows for employees and contractors—ensuring precision day-one access, timely deprovisioning, and swift operational pivot capabilities during last-minute schedule and scope shifts.

Access Reviews & Certification : Run and continuously improve our access review programme. Set up new review cycles as applications come into scope, walk reviewers through what they are being asked to confirm, chase completion, and make sure revocations are carried out.

System Ownership & Access Coordination : Connect regularly with system owners to help clarify access roles, coordinate baseline permission levels, and maintain clear, straightforward review guidelines for teams.

Audit & Compliance Partnership : Be the point of contact on access controls for internal audit, external auditors (SOC 2) and financial systems audits. Walk auditors through how our controls work, provide evidence, and follow findings through to closure with the relevant teams.

Manage Elevated Permissions : Administer privileged and administrative access, ensuring elevated permissions are time-bound, justified, and regularly reviewed.

Maintain Reliable Identity Data : Govern group memberships, access roles, and HR system integrations to ensure identity data remains accurate across systems.

Application Onboarding : Integrate new SaaS tools with our Identity Management (IdP) using SSO (SAML, OAuth 2.0, OpenID Connect) and SCIM where supported, defining access groups and initial permission levels. Where SCIM is not supported, follow a documented manual process with proper checks.

Stakeholder & Vendor Liaison : Support internal system owners and external software providers by helping troubleshoot user access requests and ensuring platform permissions stay accurate and up to date.

Solve Access Challenges : Support colleagues when access issues arise, looking into root causes to build lasting, friendly solutions rather than short-term fixes.

Automate & Streamline : Look for repetitive tasks that can be simplified or automated, and work with the team to improve them.

Who You Are

Identity Experience : Background in an IT or Identity & Access Management role using a modern identity provider. Experience with IdP is a plus, but experience with a comparable platform is welcome.

Confident with Stakeholders : Confident in proactively reaching out to new colleagues, facilitating structured discussions, and serving as a trusted advisor to help leaders at any level navigate and understand access policies.

Governance Experience : Has run or supported access reviews, and is comfortable walking an auditor through how a control works. Experience with SOC 2 or financial systems audits (IT general controls) is a strong plus.

Hands-on Lifecycle Experience : Practical experience handling joiner, mover and leaver work, access requests, or user administration, with an appreciation for why accurate access matters to people's day-to-day work.

Influences Without Authority : Partner thoughtfully with busy system owners and leadership to complete routine access reviews and remove unnecessary permissions, using clear communication, proactive follow-ups, and genuine professional relationships to keep security hygiene on track.

Single Sign-On & Provisioning : Practical experience configuring enterprise SSO alongside vendors or app owners, backed by an understanding of SAML, OAuth 2.0 and OpenID Connect. Exposure to SCIM, or a solid grasp of the concepts. Comfortable with scripting or keen to learn.

Familiar with Modern Security : Comfortable with access controls like multi-factor authentication and conditional access, as well as modern sign-in options, from one-time codes to authenticator apps, passkeys and certificates, and why some offer stronger protection.

Ownership & Follow-Through : Chases the open review, closes the loop on the finding, and doesn't let a ticket go quiet. Juggles requests, review deadlines and last-minute HR changes without dropping things.

Curious & Methodical Problem-Solver : Able to troubleshoot sign-in flows independently and find the root cause rather than the quick fix, recognising that identity work carries a low tolerance for mistakes.

Clear Communicato r: Explains things clearly in person and in writing, including documentation and evidence that an auditor can follow without a walkthrough.

What's in it for you:

A range of flexible working options to dedicate time to what matters to you

Competitive compensation package + bonus

25 days holiday per year, with an extra 5 days holiday allocated after your 1 year anniversary (prorated)

Two (paid) volunteering days a year to spend your time giving back to the causes that matter to you and your community

Rich learning and development opportunities are supported through the Trustpilot Academy and Blinkist

Comprehensive health package, pension, and full access to Headspace, a popular mindfulness app to promote positive mental health

Paid parental leave

Central office with a laid-back vibe and constant buzz of different languages being spoken everywhere you go It’s complete with a coffee bar, canteen, and table tennis and has a wide variety of refreshments available - you can opt-in for breakfast and lunch at an affordable price

Regular opportunities to connect and get to know your fellow Trusties, including company-wide celebrations and events, ERG activities, and team socials

Opportunity to join the Trustpilot Social Club for a small monthly fee and attend regular social