Skip to content
Rolevara

Guides

Guides to IAM, GRC and PAM work.

What the jobs involve, what interviewers ask, and how to practise the work before your first day.

Interview prep

IAM analyst interview questions, and how to practise the answers

Identity and access management interviews test judgment more than definitions. Here are the questions that come up most, what a strong answer covers, and how to rehearse them on realistic tickets.

Read the guide

Career guide

How to get an IAM job with no experience

Identity and access management is one of the most reachable ways into cybersecurity. This guide covers the entry roles, the skills hiring managers look for, and how to show experience before your first IAM job.

Read the guide

Career guide

GRC analyst job simulation: practise IT audit and access controls

Governance, risk and compliance work is easier to learn by doing an audit than by reading a framework. Here is what a GRC analyst does day to day, and how to practise it on a realistic company.

Read the guide

Career guide

How to get into privileged access management (PAM)

Privileged access management protects the accounts attackers want most. This guide explains what PAM work involves, the path most people take into it, and how to practise the core tasks.

Read the guide

How-to

The joiner, mover, leaver process explained

Joiner, mover, leaver (JML) is the backbone of identity and access management. Here is what happens at each stage, the mistakes that cause audit findings and incidents, and how to practise it.

Read the guide

How-to

How to run a user access review

A user access review (UAR), also called access certification or recertification, checks that people still need the access they have. Here is how a review works, what auditors look for, and how to practise one.

Read the guide

Hands-on

Practise Microsoft Entra ID, Okta and AWS IAM in a free tenant

Employers want hands-on time in the identity platforms they run. This guide covers how to get a free practice environment for each, and what to practise once you have one.

Read the guide

Early access

Be first to try new companies and labs.

Get one email each time a new company, track or platform lab is released. No payment details needed.