Data Access Control Analyst

Reap

. Maintain a live register of Payward-affiliated personnel and map access rights across Reap systems handling client data .

Posted 10/7/2026full-timeHong KongMid-LevelSeniorWebsite

Core Competencies

Role fit

Core Competencies

Use this summary to align your resume positioning with the role.

Demonstrates expertise in managing user access reviews and certifications, ensuring compliance with GDPR and data governance standards. Proficient in building regulatory-quality audit trails and utilizing IAM platforms for effective data access management.

Highest-signal resume keywords

User Access Review ManagementIAM Platform ExperienceSQL Querying for Access LogsGDPR Compliance KnowledgeAccess Certification Tooling Experience

ATS Keywords

Tailor your resume

Applicant Tracking System Keywords

Tip: use these terms in your resume and cover letter to boost ATS matches.

Hard Skills

User Access ReviewAccess Certification ProcessesSQLData ClassificationAudit Trail DocumentationAccess Policy BuildingException HandlingData Access Breach FundamentalsRegulatory ComplianceData Governance

Tools & Technologies

OktaSailPointSaviyntMicrosoft PurviewSIEM

Industry Keywords

GDPR Article 30PDPAPDPOFinancial ServicesData Segregation Obligations

Tech Stack

Tools & technologies

SQL

About the role

Key responsibilities & impact

Maintain a live register of Payward-affiliated personnel and map access rights across Reap systems handling client data
Run monthly access certification reviews for employees, contractors, service accounts, and API keys
Document review findings and exceptions with a complete audit trail
Build and maintain client data access audit logs recording who accessed what, from which system, and when
Produce monthly reports for the Data Governance Manager and CISO
Configure SIEM alert rules with the Detection/SecOps Security Engineer
Manage DSARs relating to data alongside the external DPO
Maintain data classification labels across databases, dashboards, data warehouses, file storage, and analytics environments
Update GDPR Article 30 ROPA entries for client data flows when products, geographies, or partners change

Requirements

What you’ll need

Experience running user access review and certification processes, including monthly cycles, exception handling, and escalation
IAM platform experience; Okta strongly preferred
Ability to build and audit access policies
SQL or equivalent experience querying access logs, building reports, and identifying anomalies
Understanding of GDPR Article 28 and data access breach fundamentals, including notification implications
Evidence management experience and ability to build regulatory-quality audit trails
Experience in a financial services environment with partner data segregation obligations is nice to have
PDPA or PDPO operational experience is nice to have
Microsoft Purview labelling or similar DLP tooling experience is nice to have
Access certification tooling experience with SailPoint, Saviynt, or equivalent is nice to have

Benefits

Comp & perks

A vibrant, inclusive work culture
Annual leave to relax and recharge, plus public holidays
Health insurance budget
Be part of a fast-growing global team
Flexible remote work options
Home office equipment budget
Corporate Reap Card with no out-of-pocket spending
Access to AI tools