Hybrid IAM Audit Lead — Controls, Risk & PAM

Apex Systems; Chicago, Northern (IL, KY); Hybrid; USD 95,000 - 130,000; Full time

Benefits offered by this job

Medical, dental, vision insurance

ESPP

401K with company match

HSA

EAP with counseling

Discount program

Training & certification discounts

Job summary

Everforth Apex Systems seeks an IAM Audit Analyst in Chicago to lead audits of Identity and Access Management, IT controls, and cybersecurity. You will guide testing, evaluate evidence, and collaborate with stakeholders to define scope and testing strategies that ensure strong governance and compliant access management processes.

You will oversee provisioning, de-provisioning, access reviews, and PAM testing while coordinating with risk, tech, and business teams to close gaps and drive

Qualifications

• 5–10 years in IT Audit, Risk, Controls, or IAM-focused audits.
• Strong knowledge of audit standards, methodologies, and procedures.
• Understanding of IAM concepts and cybersecurity risks.
• Experience with IAM tools and access governance.

Responsibilities

• Lead IAM/audit projects including ITGC, information security, and governance.
• Oversee IAM audit requests and evidence collection with stakeholders.
• Define scope, objectives, and testing strategies based on risk.
• Develop evidence testing timelines aligned with scope and risk.
• Draft findings, reports, and remediation recommendations.
• Coordinate with cross-functional teams to cover risk areas.

Skills

IAM principles (RBAC/PAM)

IT audit & controls

Risk assessment & testing docs

Stakeholder management & comms

IAM technologies familiarity

Education

Tools

SailPoint

Saviynt

Okta

Azure AD

CyberArk

Job description

Everforth Apex Systems seeks an IAM Audit Analyst in Chicago to lead audits of Identity and Access Management, IT controls, and cybersecurity. You will guide testing, evaluate evidence, and collaborate with stakeholders to define scope and testing strategies that ensure strong governance and compliant access management processes.

You will oversee provisioning, de-provisioning, access reviews, and PAM testing while coordinating with risk, tech, and business teams to close gaps and drive