IAM Analyst II - Detective Controls & UARs (Remote/Hybrid)

Merrick Bank; Woodbury (MN); Hybrid; USD 89,000 - 98,000; Full time

Benefits offered by this job

Competitive pay

Medical, Dental, Vision coverage

401(k) match

Disability insurance

Wellness programs

Paid vacation & holidays

Job summary

Merrick Bank, a CardWorks Financial Group subsidiary, seeks an IAM Analyst II to execute detective IAM controls and manage User Access Reviews. You will coordinate cross-functional teams, validate access data, and help automate control workflows while partnering with IAM engineering and risk teams.

The role supports governance across SOX/SOC frameworks in a hybrid work model, with opportunities to improve control effectiveness and data quality.

Qualifications

• Bachelor’s degree or equivalent in a related field and 3+ years in IAM, information security or risk.
• 3+ years' experience with SailPoint is required.
• Experience facilitating User Access Reviews, access certifications, and governance.
• Familiarity with SOX/SOC1/SOC2 or similar regulatory requirements.

Responsibilities

• Facilitate IAM detective controls focusing on UARs and access certification.
• Coordinate end-to-end execution of UARs, prepare data, engage reviewers, track completion.
• Validate data completeness, review results for exceptions, and escalate issues.
• Support additional IAM controls including reconciliations and privileged access reviews.
• Maintain documentation and evidence of control execution; assist with automation.

Skills

IAM concepts

User Access Reviews

Access governance

Data analysis

Automation scripting

Education

Bachelor’s degree in Information Security, Information Technology, Computer Science, Business, or related field

Tools

SailPoint

Delinea

Job description

Merrick Bank, a CardWorks Financial Group subsidiary, seeks an IAM Analyst II to execute detective IAM controls and manage User Access Reviews. You will coordinate cross-functional teams, validate access data, and help automate control workflows while partnering with IAM engineering and risk teams.

The role supports governance across SOX/SOC frameworks in a hybrid work model, with opportunities to improve control effectiveness and data quality.