Data Access Control Analyst
Reap is a stablecoin-native financial infrastructure company providing business accounts, Visa corporate cards, global fiat payments, expense management, and embedded card and payment services.
Funding history
About Reap
Reap is a Hong Kong-founded fintech that bridges traditional finance and digital assets for global businesses. Its platform supports stablecoin-funded corporate cards, business payments settled in fiat, expense controls, treasury operations, and embedded card-issuing and payment infrastructure. Payward completed its acquisition of Reap on July 1, 2026; Reap continues operating as a standalone brand within the Payward ecosystem.
Skills
About the Role
You will maintain a register of Payward-affiliated identities and map their access across systems holding client data. You will run monthly access certifications, document findings and exceptions, maintain access audit logs, and produce monthly reports. You will configure SIEM alerts, manage relevant DSARs, maintain data-classification labels, and update GDPR Article 30 ROPA entries for changing data flows.
Requirements
- Experience running user-access review and certification processes
- IAM platform experience, with Okta strongly preferred
- SQL or equivalent experience querying access logs and building reports
- Knowledge of GDPR Article 28 and data-access breach fundamentals
- Evidence-management experience and ability to build regulatory-quality audit trails
- Financial-services experience with partner data-segregation obligations is preferred
- PDPA or PDPO operational experience is preferred
- Microsoft Purview labelling or similar DLP tooling experience is preferred
- Access-certification tooling experience such as Sailpoint or Saviynt is preferred
Responsibilities
- Maintain a register of Payward-affiliated personnel and map their access rights across relevant systems
- Run monthly access certification reviews and document findings and exceptions
- Build and maintain client-data access audit logs
- Produce monthly access reports for the Data Governance Manager and CISO
- Configure SIEM alerts for Payward-affiliated access attempts
- Manage DSARs involving client data with the external DPO
- Maintain data-classification labels across systems holding client data
- Update GDPR Article 30 ROPA entries when client-data flows change
Benefits
- Annual leave and public holidays
- Health insurance budget
- Flexible remote work options
- Home office equipment budget
- Corporate Reap Card