Cybersecurity IAM Analyst

Global Sports Jobs Limited; Nashville (TN); Hybrid; USD 90,000 - 120,000; Full time

Benefits offered by this job

Medical insurance

Vacation & holidays

401K plan

Employee assistance plan

Commuter benefits

Job summary

Creative Artists Agency (CAA) is seeking an IAM Analyst to manage day-to-day identity and access management operations within the Information Security group. You will coordinate provisioning, de-provisioning, access changes, and governance activities in a fast-paced environment that leverages cloud services.

Based in Nashville and hybrid-enabled, you will partner with HRIS, IT service owners, and the help desk to ensure least privilege, attestation, and audit readiness across enterprise systems.

Qualifications

• 2–3 years in IT with 2+ years in Identity Management.
• Experience with lifecycle provisioning, de-provisioning and access reviews.
• Knowledge of MFA, privileged identity and just-in-time provisioning.
• Scripting skills in PowerShell, Python, or JavaScript.

Responsibilities

• Manage user lifecycle provisioning and de-provisioning and access requests.
• Design, evaluate, test, and implement IAM programs to support strategy.
• Maintain RBAC standards and entitlement catalogs across the company.
• Collaborate with HRIS, IT service owners, and service desk to resolve workflows.
• Automate identity workflows and lifecycle processes, including auditing.
• Execute periodic access reviews and attestations; track remediation.
• Contribute to audit readiness and evidence collection for IAM controls.
• Improve operational efficiency with runbook development and standardisation.
• Participate in cross-functional initiatives such as M&A integrations and migrations.

Skills

Identity Management

Lifecycle Management

Provisioning

De-provisioning

RBAC

Just-in-time provisioning

Just-enough access

Least privilege

Scripting (PowerShell)

Scripting (Python/JavaScript)

Education

Bachelor's or Master's in a relevant field

Tools

OAuth

SAML

OpenID

REST APIs

SCIM provisioning

IDaaS

NIST framework

Job description

About the Role

This is a hands-on security position within the Information Security group, working closely with the internal IT department at large. The role's core focus is managing and coordinating the day-to-day functions of identity and access management operations, helping to protect enterprise assets by ensuring the right individuals have appropriate access to systems, applications, and data in line with business needs and risk tolerance. The IAM Analyst supports both operational execution — provisioning, access changes, and incident response — and governance functions such as access reviews, policy enforcement, and identity lifecycle management, contributing to a scalable and auditable IAM programme. The environment is fast-paced and commonly on the leading edge of technology, including early adoption of various cloud services and the challenges of integrating those services into the security practice.

Key Responsibilities

• Maintain a deep understanding of user lifecycle management, including provisioning and de-provisioning, access requests, user entitlements, and audit and validations.
• Provide design, evaluation, analysis, testing, debugging, and implementation of identity and access management programmes to support the company's strategy.
• Maintain standards for access management across the company and department, including role-based access control (RBAC) models and entitlement catalogues.
• Collaborate with HRIS, IT service owners, and the service desk to troubleshoot and fulfil identity-related workflows.
• Apply knowledge of identity governance workflows, including the concepts of attestation and auditing.
• Assist in automating identity workflows and processes for lifecycle management, auditing, reporting, governance, and self-service.
• Execute periodic access reviews and certifications and track remediation activities.
• Contribute to audit readiness and evidence collection for IAM controls.
• Improve operational efficiency through standardisation and runbook development.
• Participate in cross-functional initiatives, including M&A integrations and system migrations.

Required Experience & Qualifications

• A minimum of 2-3 years in Information Technology.
• A minimum of 2 years' experience in Identity Management.
• Experience in lifecycle management and provisioning and de-provisioning.
• Knowledge of different MFA and compensating controls for identity.
• Knowledge of privileged identity management, privileged access management, and the concepts of just-in-time provisioning, just-enough access, and principle of least privilege.
• Familiarity with scripting in at least one of the following languages: PowerShell, Python, or JavaScript.
• A strong understanding of the fundamental operations of servers, operating systems, cloud applications, and infrastructure.
• A deep understanding of user lifecycle management, including provisioning and de-provisioning, access requests, user entitlements, and audit and validations.

Preferred Skills

• A minimum of 2 years' experience in information security.
• A Bachelor's or Master's degree in a relevant field of work.
• Account set-up and access management.
• Experience working closely with human resources and help desk support staff.
• A demonstrated organised and methodical approach to making improvements on past organisations' technology projects.
• Experience in automation and integration with SaaS applications.
• Understanding of OAuth, SAML, and OpenID frameworks.
• Building and using REST APIs.
• Knowledge and experience of SCIM provisioning and integration.
• Experience creating and supporting a fully identity framework or IDaaS.
• An understanding of the NIST framework and using a continuous improvement loop.
• A familiarity with vulnerability assessment and network scanning tools.

Workplace

• Hybrid working, based in the Nashville office.

Benefits & Perks

• Eligible for benefits and a discretionary bonus.
• The company pays 80%-100% of the cost of medical, basic life and AD&D insurance, telemedicine, employee assistance and mental health counselling (in person, virtually, or through text), paid vacation and holidays, paid sick time, paid parental leave and other paid leaves of absence, NICU leave, bereavement resources, adoption benefits, educational assistance, mental health resources.
• And an employee assistance plan.
• Voluntary benefits employees may elect include dental and vision insurance, a 401K plan, flexible spending accounts (health care and dependent care), a health savings account, and voluntary life and AD&D insurance.
• Commuter benefits.
• Other statutory mandated benefits are also offered.

About the Company

Creative Artists Agency (CAA) is the leading entertainment and sports agency, with global expertise in filmed and live entertainment, digital media, publishing, sponsorship sales and endorsements, media finance, consumer investing, fashion, trademark licensing, and philanthropy. Founded in 1975, CAA is headquartered in Los Angeles and has offices in New York, Nashville, Memphis, Chicago, Miami, London, Munich, Geneva, Stockholm, Shanghai, and Beijing, among other locations globally.