IAM Access Auditor: Build & Lead Audit Frameworks

Remotedxb; Dubai; On-site; AED 260,000 - 380,000; Full time

Job summary

Remotedxb in Dubai is seeking an experienced Access Specialist to design and lead our access audit program. You will define methodology, cadence, evidence collection, and reporting templates to ensure strong governance over IAM, GCP, LDAP, and PAM.

You will perform risk-based scoping, run regular and ad-hoc audits, prepare audit-ready reports, track remediation with owners, and continuously improve the process to meet ISO 27001, SOC 2, and NIST requirements.

Qualifications

• 2+ years of experience as an Access Specialist, IAM Auditor, or similar.
• Experience designing and building an access audit process from scratch.
• Hands-on with GCP, LDAP, service accounts, and org policies.
• Experience with Privileged Access Management (PAM) tools.
• Experience with IGA tools such as One Identity, Okta, Entra ID, or Keycloak.
• Familiarity with compliance frameworks like ISO 27001, SOC 2, and NIST.

Responsibilities

• Design and establish a standardized access audit framework, including methodology, cadence, evidence collection, and reporting templates.
• Define risk-based audit scope and sampling for complex landscapes.
• Run regular and ad-hoc access audits across the environment, including privileged and administrative accounts.
• Audit GCP IAM, LDAP, and PAM tools for stale accounts, excessive permissions, and misconfigurations.
• Prepare audit-ready reports and evidence packages for internal and external review.
• Track remediation actions with system and application owners.
• Maintain audit documentation and runbooks.
• Continuously refine audit methodology based on findings and compliance requirements.

Skills

Access audits

IAM governance

Risk-based auditing

Tools

GCP IAM

LDAP

One Identity

Okta

Entra ID

Keycloak

PAM tools

service accounts

org policies

Job description

Remotedxb in Dubai is seeking an experienced Access Specialist to design and lead our access audit program. You will define methodology, cadence, evidence collection, and reporting templates to ensure strong governance over IAM, GCP, LDAP, and PAM.

You will perform risk-based scoping, run regular and ad-hoc audits, prepare audit-ready reports, track remediation with owners, and continuously improve the process to meet ISO 27001, SOC 2, and NIST requirements.