IAM Governance Analyst: Access & Compliance Specialist

American Express Global Business Travel; Poland; Remote; PLN 120,000 - 180,000; Full time

Benefits offered by this job

Flexible benefits

Travel perks

Learning platform access

Job summary

Amex GBT in Poland is seeking an IAM Governance Analyst to support User Access Review campaigns using Saviynt or similar IGA tools. You will help with audit and compliance activities, ensuring access controls meet policy and evidence requirements.

The role requires 3+ years in GRC, internal audit, or IAM, with strong data analysis, Excel mastery, and a proactive, detail-oriented mindset. A collaborative, process-driven environment awaits.

Qualifications

• 3+ years in GRC, internal audit, IT compliance, or IAM.
• Hands-on with UAR campaigns on an IGA platform (Saviynt, SailPoint, Okta).
• Experience supporting audit/compliance activities with evidence gathering.
• Knowledge of NIST, ISO, SOX, SOC2, or Privacy related to access control.
• Able to analyze access data and communicate findings clearly.
• Advanced Excel skills, plus PowerPoint and 365 proficiency.

Responsibilities

• Plan, configure, launch, and manage UAR campaigns end-to-end using Saviynt or equivalent IGA platforms.
• Monitor campaign progress, track reviewer completion, chase certifications, and close campaigns on time.
• Keep audit-ready records of campaign activity, decisions, and outcomes.
• Validate access certification results before closure and verify remediation actions.
• Support audit and compliance requirements with evidence collection and control testing.
• Document findings to satisfy auditors and drive remediation with cross-functional teams.

Skills

GRC

Internal audit

IT compliance

IAM governance

Data analysis

Excel

PowerPoint

Microsoft 365

Tools

Saviynt

SailPoint

Okta

Job description

Amex GBT in Poland is seeking an IAM Governance Analyst to support User Access Review campaigns using Saviynt or similar IGA tools. You will help with audit and compliance activities, ensuring access controls meet policy and evidence requirements.

The role requires 3+ years in GRC, internal audit, or IAM, with strong data analysis, Excel mastery, and a proactive, detail-oriented mindset. A collaborative, process-driven environment awaits.