Sr. Analyst, IAM Compliance and Audit

About the role

The ideal candidate has hands-on experience leading audit and compliance initiatives and coordinating related activities within a large organization. They must be detail-oriented, capable of thriving in a fast-paced environment, and possess strong analytical skills. A solid foundation in Identity and Access Management (IAM) is required, as this role may support additional IAM functions, including identity lifecycle management, access provisioning, authentication support, access hygiene, and compliance activities.

Required Qualifications

• 5+ years of experience in Identity & Access Management (IAM), Information Security, IT Audit, Compliance, or Risk Management.
• Proven experience leading and coordinating internal audits, external audits, regulatory assessments, control testing, evidence collection, and remediation activities.
• Strong understanding of IAM governance, identity lifecycle management (Joiner, Mover, Leaver), access provisioning, user access reviews, and Segregation of Duties (SoD).
• Experience supporting compliance frameworks and regulatory requirements, including SOX, NIST, HIPAA, HITRUST, GDPR, and PCI-DSS.
• Demonstrated ability to manage findings, risks, issues, and corrective action plans through completion.
• Strong analytical and problem-solving skills with advanced Microsoft Excel experience, including data validation, reporting, Pivot Tables, and Power Query.
• Experience collaborating across cross-functional teams and communicating effectively with technical and non-technical stakeholders.
• Bachelor's degree in Cybersecurity, Information Technology, Computer Science, or related field, or equivalent experience.

Preferred Qualifications

• Experience serving as an IAM control owner and managing preventive and detective controls.
• Hands-on experience with SailPoint Identity Governance and Administration (IGA).
• Knowledge of Active Directory, Microsoft Entra ID (Azure AD), and ServiceNow.
• Experience developing IAM metrics, dashboards, and executive reporting.
• Professional certifications such as CISA, CISM, CISSP, CRISC, or CIAM.
• Experience supporting IAM governance programs within large, complex, or highly regulated organizations.
• Demonstrated ability to lead cross-functional initiatives and drive audit readiness, compliance, and operational excellence.

Desired Skills and Experience

• Identity & Access Management (IAM), IAM Governance, Identity Governance & Administration (IGA), SailPoint
• IT Audit, Audit Readiness, Compliance Management, SOX, SOC 1, SOC 2, HITRUST, GDPR, NIST
• IT Risk Management, Internal Controls, Control Testing, Evidence Collection, Regulatory Compliance
• Segregation of Duties (SoD), User Access Reviews (UAR), Access Certification Programs
• Identity Lifecycle Management, Joiner Mover Leaver (JML), Access Provisioning, Privileged Access Governance
• Risk Assessment, Issue Remediation, Root Cause Analysis, Incident Response Support
• Reporting & Documentation, Data Analysis, Governance Risk & Compliance (GRC)
• ServiceNow GRC, AuditBoard, RSA Archer
• Active Directory, Microsoft Entra ID (Azure AD), Directory Services, ServiceNow, ITSM
• Microsoft Excel, Pivot Tables, Power Query, Advanced Excel Functions, Dashboard Reporting, Metrics Development
• Cross-Functional Leadership, Stakeholder Management, Critical Thinking, Problem Solving, Attention to Detail
• Accountability, Interpersonal Communication, Learning Agility, Adaptability, Multitasking, Time Management
• Collaboration, Teamwork, Operational Excellence