Senior IAM Governance Analyst

Harvey Nash; Greater London; On-site; GBP 70,000 - 100,000; Full time

Job summary

Harvey Nash is seeking a Senior IAM Governance Analyst to join a Managed Services team delivering identity governance for clients in complex environments. You will oversee access review campaigns, coordinate owners and reviewers, manage exceptions and remediation, ensuring governance controls are auditable and effective.

You will work with engineering colleagues including Microsoft Entra specialists to improve processes, reporting and automation, while travel to client sites up to two days per

Qualifications

• Proven IAM/IDAM experience in identity governance or access-control operations.
• Experience managing user access reviews or recertification or similar periodic control processes.
• Understanding of identity lifecycle management, access approvals, entitlement ownership, least privilege and exception handling.
• Experience preparing audit-ready evidence and working with risk, compliance or internal and external audit teams.
• Strong analytical and data-reconciliation skills.
• Experience maintaining documentation and evidence repositories using SharePoint or similar tools.
• Stakeholder management and communication across technical and non-technical teams.
• Ability to work independently and manage competing deadlines.

Responsibilities

• Plan and deliver recurring and ad hoc access reviews across applications, groups, roles and entitlements.
• Agree review scope, reviewer responsibilities, decision criteria, deadlines and escalation procedures with relevant stakeholders.
• Guide reviewers through the process, follow up overdue or incomplete decisions, and ensure outcomes are evidence-based.
• Track access removals, exceptions and remediation actions through to verified completion, escalating control issues where necessary.
• Maintain accurate review records, audit evidence, process documentation and management reporting using SharePoint and relevant service tools.
• Analyse review results to identify data-quality issues, ownership gaps and opportunities to strengthen governance processes.
• Collaborate with engineering teams to improve automation, reporting and Microsoft Entra ID Governance capabilities.
• Build effective working relationships with security, risk, audit, application, service and business teams.

Skills

IAM/IDAM experience

Access reviews

Identity lifecycle

Audit evidence

Data analysis

SharePoint

Stakeholder mgmt

Independent work

Escalation handling

Tools

Entra Governance

RBAC

Regulated environments

Service-management

Certifications

Job description

About the Role

We are seeking a Senior IAM Governance Analyst to join a Managed Services team delivering identity governance solutions for clients in complex operational environments. The role focuses on ensuring that access to systems, applications and data is appropriate, regularly reviewed and supported by clear audit evidence.

As a Senior Consultant within the User Access Reviews (UAR) team, you will oversee access review campaigns, coordinate application owners and reviewers, manage exceptions and remediation, and ensure governance controls operate effectively. Working closely with engineering colleagues, including Microsoft Entra specialists, you will help improve processes, reporting and automation.

This is a hands-on position requiring strong IAM knowledge, analytical skills, audit awareness and stakeholder management.

(Must have Active Security Clearance SC)

Requirements

Active Security Clearance (SC) or Counter Terrorism Clearance (CTC) is essential. Candidates should be based in the London area and be willing to travel to client sites up to two days per week.

Key Responsibilities

• Plan and deliver recurring and ad hoc access reviews across applications, groups, roles and entitlements.
• Agree review scope, reviewer responsibilities, decision criteria, deadlines and escalation procedures with relevant stakeholders.
• Guide reviewers through the process, follow up overdue or incomplete decisions, and ensure outcomes are evidence-based.
• Track access removals, exceptions and remediation actions through to verified completion, escalating control issues where necessary.
• Maintain accurate review records, audit evidence, process documentation and management reporting using SharePoint and relevant service tools.
• Analyse review results to identify data-quality issues, ownership gaps and opportunities to strengthen governance processes.
• Collaborate with engineering teams to improve automation, reporting and Microsoft Entra ID Governance capabilities.
• Build effective working relationships with security, risk, audit, application, service and business teams.

Essential Skills and Experience

• Proven experience in IAM/IDAM, identity governance or access-control operations.
• Practical experience managing user access reviews, access recertification or similar periodic control processes.
• Understanding of identity lifecycle management, access approvals, entitlement ownership, least privilege and exception handling.
• Experience preparing audit-ready evidence and working with risk, compliance or internal and external audit teams.
• Strong analytical and data-reconciliation skills, with the ability to investigate anomalies and track actions to completion.
• Experience maintaining operational documentation, records and evidence repositories using SharePoint or similar tools.
• Confident stakeholder management and communication skills across technical and non-technical teams.
• Ability to work independently, manage competing deadlines and escalte issues appropriately.

Desirable Skills and Experience

• Experience with Microsoft Entra ID Governance, including Access Reviews, Entitlement Management or Privileged Identity Management.
• Knowledge of role-based access control (RBAC), segregation of duties and access-control design.
• Experience in regulated, safety-critical or complex multi-partner environments.
• Familiarity with service-management platforms, operational reporting and continuous improvement.
• Relevant Microsoft identity, security, audit or IT service-management certifications.