Data Access Control Analyst

About Reap

Reap is a global leader in payment technology, facilitating financial connectivity and access for businesses internationally. By integrating conventional finance with digital assets and bridging various economies, Reap transforms the financial ecosystem into a seamless and interoperable system for efficient financial transactions. Their offerings include stablecoin-enabled corporate cards, payout solutions, and expense management tools. They also provide APIs that allow businesses to embed financial capabilities—from issuing Visa cards to managing cross-border payments—into their own products. Reap is backed by notable investors including Acorn Pacific Ventures, Arcadia Funds, and HashKey Capital, among others.

Role Overview

Security forms the foundation of Reap’s operations involving multiple payment systems such as traditional finance, stablecoins, and real-time payments. This role is crucial for ensuring the enforcement of data segregation policies and compliance with regulatory requirements by preventing unauthorized access, especially by employees affiliated with Payward/Kraken. The Data Access Control Analyst will monitor access permissions, maintain detailed audit trails, and collaborate with security and compliance teams to safeguard client data.

Key Responsibilities

• Maintain and update a comprehensive registry of all Payward-affiliated personnel, tracking their access permissions across every system handling client data at Reap.
• Conduct monthly access certification reviews to verify that no Payward-affiliated identities—including employees, contractors, service accounts, or API keys—have unauthorized data access, documenting all findings and exceptions with full audit trails.
• Create and maintain detailed audit logs capturing who accessed what data, from which system, and when, producing monthly compliance reports for management.
• Collaborate with the Detection/SecOps Security Engineer to implement SIEM alert configurations for any unauthorized access attempts by Payward-affiliated personnel.
• Manage the Data Subject Access Request (DSAR) process in partnership with external Data Protection Officers, ensuring timely and compliant responses.
• Ensure up-to-date data classification labels across databases, dashboards, data warehouses, file systems, and analytics platforms.
• Regularly update records of processing activities related to client data flows in compliance with GDPR Article 30, especially when introducing new products, regions, or partners.

Essential Qualifications and Experience

• Hands-on experience running user access review and certification processes, managing monthly cycles, exceptions, and escalations.
• Proficiency in Identity and Access Management (IAM) platforms, with strong preference for Okta, including building and auditing access policies.
• Ability to write and execute SQL or similar queries to analyze access logs, generate reports, and detect anomalies.
• Understanding of GDPR Article 28, data access breach definitions, and associated notification requirements.
• Strong evidence management skills, capable of building robust regulatory-compliant audit trails beyond simple spreadsheet documentation.

Desirable Skills

• Experience in financial services with obligations around partner data segregation.
• Operational knowledge of data protection laws such as PDPA or PDPO.
• Familiarity with Microsoft Purview or comparable Data Loss Prevention (DLP) tools.
• Experience with access certification software solutions like Sailpoint or Saviynt.

Why Join Reap?

• Opportunity to design and implement a novel system from scratch within the company.
• Close collaboration with the Chief Information Security Officer and Data Governance Manager on a critical compliance area.
• Work with concrete and measurable outcomes, ensuring audit trails meet stringent standards.
• Use of AI tools to enhance work efficiency and effectiveness.

Employee Benefits

• An inclusive and energetic work environment.
• Annual leave entitlement plus public holidays for relaxation and recharging.
• Allocation for health insurance coverage.
• Membership in a dynamic, expanding global team.
• Flexible options to work remotely.
• Budget for home office equipment.
• Corporate expense card issued to employees to avoid out-of-pocket spending.