What we do
Hi, we are Vodeno. We are innovators in the Banking-as-a-Service space. Our technology is cloud-native, and our teams work in the cloud like fish in water. Supported by a leading global equity firm and the ecosystem of nearly 90 partners, our Platform opens new opportunities for businesses across Europe to integrate financial products and services into their solutions.
As part of the UniCredit Group, Aion Bank and Vodeno will accelerate their digital banking offer in strategic markets and will act as a sandbox for innovation for the wider UniCredit Group.
Based on financial sector know-how and expertise in cloud technology, we provide a set-up of customer-facing and daily banking services which include: digital onboarding, accounts, cards, payments, and lending with a white-label mobile app channel access.
We are defined by the following values:
- Client at the centre - we deliver value to our clients
- Curiosity - we want to know more!
- Accountability - we deliver on our promises
- Collaboration - we can achieve more with others
We are currently looking for Cloud IAM Specialist (GCP) ready to join our adventure.
What you will be doing
Role SummaryThe Cloud IAM Specialist ensures secure and compliant access management across all cloud environments in the bank. The role is essential for safeguarding workloads in GCP, managing service accounts, automating access workflows, and ensuring compliance with regulatory and internal security standards.
Role Purpose
The Cloud IAM Specialist is responsible for managing access rights within Google Cloud Platform (GCP) and Google Workspace, ensuring compliance with the principle of least privilege, internal security policies, and regulatory requirements (DORA, EBA, KNF).
This role is critical for protecting banking systems in the cloud, controlling service accounts, and automating access provisioning and deprovisioning.
Key Responsibilities
1. IAM Management in GCP and Google Workspace
Maintain and enforce the least privilege principle across all environments.
Design, implement, and review GCP IAM roles (predefined roles, custom roles).
Perform regular access reviews and recertifications (users, groups, service accounts).
Review and manage service account permissions, keys, and their rotation.
Monitor IAM policy changes via Audit Logs and Cloud Asset Inventory.
2. Automation of Access Provisioning & Deprovisioning
3. Security Monitoring and Control
Identify permission risks, overprivileged accounts, and misconfigurations.
Use tools such as IAM Recommender, Policy Analyzer, SCC.
Support incident investigations related to access violations.
Ensure compliance with:
SSO
SAML
OAuth 2.0
JWT
Zero Trust access
4. Audit and Compliance Support
Provide access reports and evidence for internal and external audits (DORA, KNF, internal audit).
Document IAM processes, controls, and exceptions.
Participate in architecture and risk assessments related to cloud security.
5. Collaboration with Technical TeamsWork closely with DevOps, Data, Platform Engineering, Workspace Admin, and Security Operations.
Advise teams on IAM best practices for new services and migrations.
Support secure design of access models for GCP workloads and Google Workspace integrations.
What we offer
You will get an opportunity to work in an innovative, digital bank applying state of the art approaches and technologies.
You will be provided an Individual Development Budget, dedicated to enhancing your professional skills.
If your role permits, we also offer flexible work location.
You and your closest family will be covered with VIP-level private medical care which includes dental treatment and a hospitalisation package.
We care for our colleagues’ well being, therefore we cover psychological consultations if you ever feel you need such support.
Aion bank account without fee.
We co-sponsor your Multisport card and cover 50% of its cost.
You will work on computer equipment that delivers the best user experience — Apple MacBook.
Our office in Warsaw offers healthy snacks throughout the day.
Our process
We keep our recruiting process simple.
Step 1: Talk with one of our Recruiters about your experience and ambitions
Step 2: Meet with your future team manager for a technical interview
Step 3: Meet with Line Manager to discuss how we fit each other
Our note to you
Diverse teams really are the best teams. Research shows that some candidates may hesitate to apply for a job unless they meet every requirement. If you are excited about working with us, we encourage you to apply - even if you're not 100% sure. We are interested in getting to know you and learning about what you bring to the table.
Please note that we may close a job posting early if we receive a large number of exceptional applications.
Good luck!
