Identity Management Specialist for AI Agents

• Flexible schedule and remote work (3 days in the office and 2 days of remote work).
• A flexible compensation package that includes: meal vouchers, childcare vouchers, medical insurance, life insurance, employee discounts, and more. And if you live in Madrid, a company shuttle bus is available to get you to the office.
• Access to an attractive pension plan.
• Summer intensive schedule.
• You'll be in charge of your own learning journey, with access to thousands of resources to keep advancing your technical expertise. Plus, you'll receive an additional €1,100 per year to further develop your skills.
• 25 vacation days per year (you would receive the proportional days starting from your start date).
• Additionally, at Mapfre we do not work on December 24, December 31, or January 5.
• 28 hours per year for personal matters + 3 recoverable days during Easter week.
• The opportunity to participate in volunteer projects.
• Padel courts, gym, and other sports activities in our offices.
• A great place to work! We're ranked among the 50 best companies to work for in Spain according to Forbes magazine.

We are diverse, and that makes us unique!

Every recruitment process at MAPFRE is carried out under the principles of EQUAL OPPORTUNITIES and NON-DISCRIMINATION, where the candidate's SKILLS and PROFESSIONAL MERIT are the only criteria considered for the final hiring decision.

We create work environments that value diversity and are free from discrimination based on sex, race, ideology, religion, sexual orientation, age, nationality, disability, or any other personal, physical, or social condition.

You can consult our Diversity and Equal Opportunity policy: politica-de-diversidad-e-igualdad-de-oportunidades.pdf (mapfre.com)

By registering for this job offer, you are informed of and consent to the processing by MAPFRE of the personal data you have voluntarily provided through this platform. If you provide data of third parties other than yourself, you guarantee that you have obtained and have their prior consent for the communication of their data and that you have informed them.

MAPFRE, as data controller, will process your data solely for the purpose of managing your participation in selection processes, for which profiles may be created and automated decisions may result from the processing of your data. In order to manage your participation in various selection processes at companies of the MAPFRE Group, subsidiaries and investees, and Fundación MAPFRE, your data may be communicated to those entities and may be subject to international transfer.

You can consult additional data protection information at MAPFRE in https://www.mapfre.com/corporativo-es/clausulas/RRHHseleccion.pdf where we indicate where to exercise your rights of access, rectification, erasure, restriction, objection, and portability of your personal data.

Change your life and continue developing your professional career at Mapfre! You will be part of an international environment where you can innovate by participating in global projects focused on the latest technological trends. All this in a flexible and agile environment surrounded by excellent professionals from all over the world... are you ready?

• Identify, inventory, and catalog the Artificial Intelligence agents deployed in the organization.
• Identify owners, functional managers, and technical managers for each agent.
• Design and implement identity and access models for AI agents.
• Define classifications and evaluate agents according to criticality, functionality, autonomy, and risk level.
• Analyze and document access, privileges, consumed resources, and dependencies.
• Implement authentication, authorization, and activity traceability mechanisms.
• Design segregation of duties controls for autonomous agents.
• Review and regularize assigned permissions, roles, and privileges.
• Manage the complete lifecycle: onboarding, modification, review, deactivation, and deletion.
• Implement periodic access certification and recertification processes.
• Define and deploy automation for AI identity governance.
• Perform risk analyses and remediation activities.
• Participate in architecture and security reviews for new AI initiatives.
• Prepare technical documentation, operating procedures, and corporate standards.

From the corporate cybersecurity Identity and Access Management area, we are looking for a senior profile specialized in the management, governance, and security of Artificial Intelligence agent identities (AI Agents), with experience in corporate AI architectures, non-human identities, automation, and access controls in hybrid and multicloud environments.

The main mission will be to define, implement, and operate the identity, authentication, authorization, governance, and supervision models for AI agents, ensuring they act in a secure, controlled, traceable manner and aligned with the organization's security and compliance policies.

Las Tablas, Madrid.

• Demonstrable experience of at least 3 years in Identity Management and Security projects.
• Hands-on experience in the design and implementation of IAM solutions in complex enterprise environments.
• Participation in initiatives related to Artificial Intelligence, automation, or non-human identities.
• Experience working with Security, Enterprise Architecture, Cloud, Data, Development, and Artificial Intelligence teams.
• Participation in governance and access control projects for critical applications and APIs.
• Experience in segregation of duties models, least privilege, and role-based and attribute-based access control.

• Technically lead initiatives related to the identity and security of Artificial Intelligence agents. Ensure that all agents have a unique, managed, and governed identity.
• Ensure the application of least privilege and Zero Trust principles.
• Maintain an updated inventory of agents, permissions, owners, and dependencies.
• Identify risks derived from excessive access, inherited permissions, or insecure configurations.
• Periodically review Artificial Intelligence agent identities and their activity and execute corresponding remediation plans.
• Propose and execute mitigation and continuous improvement plans.
• Guarantee the traceability and auditability of actions executed by intelligent agents.
• Collaborate with Security, Architecture, AI, Cloud, Development, and Compliance.
• Keep the identity governance framework for AI agents updated.
• Ensure compliance with internal and regulatory standards related to AI and access management.

• Functional integration into the corporate Identity and Security team.
• Participation in strategic Artificial Intelligence adoption initiatives at a corporate level.
• Hybrid and multicloud environment with the presence of Microsoft Azure, AWS, and Google Cloud.
• Continuous collaboration with AI, Data, Enterprise Architecture, Security, and Development teams.
• Participation in international and digital transformation projects.
• Approach oriented towards effective implementation, operational governance, and continuous improvement.