IAM Audit Analyst

Spectraforce Technologies; Chicago (IL); Hybrid; USD 96,000 - 165,000; Full time

Job summary

Spectraforce Technologies is seeking an IAM Audit Analyst for a 4-month contract in Chicago, IL, with a hybrid work model and a required Wednesday anchor day. The role focuses on leading IAM, ITGC, and information security audits, coordinating with 1LOD/2LOD and stakeholders.

Responsibilities include defining audit scope, testing strategies based on risk, overseeing evidence collection, and drafting findings and remediation plans across IAM controls, access reviews, and PAM.

Qualifications

• 5-10 years of experience in IT Audit, Risk, and Controls.
• IAM-focused audits or security controls experience.

Responsibilities

• Lead audit engagements focusing on IAM, ITGCs, and cybersecurity.
• Oversee audit requests, evaluate evidence, and define scope with 1LOD/2LOD.
• Develop evidence testing documentation and testing strategies based on risk.
• Draft audit findings, reports, and recommendations for remediation.
• Coordinate with stakeholders across business, technology, risk, and control functions.

Job description

Role: IAM Audit Analyst

Location: Chicago, IL Work Model: Hybrid - Anchor Days: Wednesday is mandatory; contractor selects 2 additional days per week

Duration: 04 Months

JD:

• The IAM Audit Analyst leads audit engagements (internal/external) focused on Identity and Access Management (IAM), IT controls, and cybersecurity.
• This role involves overseeing audit request execution, evaluating evidence, and working closely with 1LOD/2LOD to define scope and develop effective evidence testing documentation.
• You will bring technical expertise in risk, controls, and IAM technologies, ensuring strong governance and compliance across access management processes.

Key Responsibilities

Lead projects related to:

• Identity and Access Management (IAM) controls
• IT General Controls (ITGC)
• Information security / cybersecurity
• Application and system implementation reviews
• IT governance and operational processes
• Provide oversight and guidance to stakeholders on IAM Audit requests and Evidence Requests
• Partner with Implementation owners to:
• Define audit scope and objectives
• Develop appropriate testing strategies based on risk assessment
• Assist in developing evidence testing timelines based on scope and risk
• Finalize and review audit planning and scoping documentation
• Conduct and review walkthroughs and testing of:
• Application controls
• Interface controls
• IAM processes (provisioning, de-provisioning, access reviews, PAM)
• Ensure work meets departmental standards and quality requirements
• Analyze and review implementation plans, and follow up on milestones for issues identified by 1LOD, 2LOD, and Audit teams
• Work with various stakeholders across business, technology, risk, and control functions tdrive issue resolution, remediation tracking, and governance alignment
• Communicate audit status and findings tbusiness stakeholders and leadership
• Draft audit findings, reports, and recommendations for:
• Status updates
• Memos
• Final Closure Packages
• Identify and evaluate risks, control gaps, and remediation actions
• Coordinate with other teams (regional, business unit, specialist teams) to ensure comprehensive coverage of risk areas

Required Skills & Qualifications:

• 5-10 years of experience in:
• IT Audit / Risk / Controls
• IAM-focused audits or security controls

Strong knowledge of:

• Audit standards, methodologies, and procedures
• IT systems, applications, and cybersecurity risks
• Identity and Access Management (IAM) principles, including:
• User lifecycle management
• Role-based access control (RBAC)
• Privileged Access Management (PAM)
• Experience with IAM technologies such as:
• SailPoint, Saviynt, Okta, Azure AD, CyberArk (or similar)
• Understanding of IT General Controls (ITGC) and compliance frameworks (SOX, ISO, etc.)
• Ability to lead and execute:
• Walkthroughs
• Design and operational effectiveness testing
• Strong analytical, documentation, and reporting skills
• Excellent communication and stakeholder management skills

Key Competencies

• Strong risk and control mindset
• Ability to lead audit engagements independently
• Attention to detail with a strategic perspective
• Flexibility, creative thinking, and sound business judgment
• Team-player with ability to thrive in high-pressure environments

Preferred Qualifications:

Certifications such as:

• CISA, CISSP, CRISC (ISACA, ISC2, or equivalent)

Experience in:

• IAM governance and access certification programs
• Cloud IAM environments (Azure, AWS, GCP)
• Ability to manage:
• Multiple projects simultaneously
• Tight deadlines with strong prioritization