IAM Audit Analyst

The Judge Group; Chicago (IL); On-site; USD 76,000 - 96,000; Full time

Benefits offered by this job

Medical insurance

Dental insurance

Vision insurance

Job summary

The Judge Group is seeking an IAM Audit Analyst to lead audits and assessments focused on Identity and Access Management, IT controls, and cybersecurity. This role partners with Technology, Risk, Compliance, and Audit teams to evaluate control effectiveness, manage audit requests, identify risks, and support remediation efforts.

Responsibilities include leading IAM, ITGC, and cybersecurity audits; defining scope and testing strategies; conducting walkthroughs of IAM controls; and preparing

Qualifications

• 5+ years of experience in IT audit, IT risk, controls, information security, or IAM.
• Experience with IAM audits, security controls, and IT General Controls (ITGC).
• Knowledge of IAM concepts, including User Lifecycle Management, RBAC, and PAM.
• Experience conducting walkthroughs, control testing, and evidence reviews.
• Strong analytical, communication, and stakeholder management skills.

Responsibilities

• Lead audits related to IAM, IT General Controls (ITGC), cybersecurity, and technology governance.
• Define audit scope, testing strategies, and evidence requirements with stakeholders.
• Conduct walkthroughs and testing of IAM controls, including provisioning, deprovisioning, access reviews, RBAC, and PAM.
• Assess control effectiveness, identify risks and gaps, and track remediation activities.
• Prepare audit documentation, findings, reports, and executive status updates.
• Partner with business, technology, and risk teams to support governance and compliance objectives.

Skills

IAM audits

IT General Controls

User lifecycle

RBAC

PAM

Walkthroughs

Stakeholder management

Tools

SailPoint

Saviynt

Okta

Microsoft Entra ID (Azure AD)

CyberArk

Job description

The IAM Audit Analyst leads audits and assessments focused on Identity and Access Management (IAM), IT controls, and cybersecurity. This role partners with Technology, Risk, Compliance, and Audit teams to evaluate control effectiveness, manage audit requests, identify risks, and support remediation efforts.

Responsibilities

• Lead audits related to IAM, IT General Controls (ITGC), cybersecurity, and technology governance.
• Define audit scope, testing strategies, and evidence requirements with stakeholders.
• Conduct walkthroughs and testing of IAM controls, including provisioning, deprovisioning, access reviews, RBAC, and Privileged Access Management (PAM).
• Assess control effectiveness, identify risks and gaps, and track remediation activities.
• Prepare audit documentation, findings, reports, and executive status updates.
• Partner with business, technology, and risk teams to support governance and compliance objectives.

Minimum Qualifications

• 5+ years of experience in IT Audit, IT Risk, Controls, Information Security, or IAM.
• Experience with IAM audits, security controls, and IT General Controls (ITGC).
• Knowledge of IAM principles, including User Lifecycle Management, RBAC, and PAM.
• Experience conducting walkthroughs, control testing, and evidence reviews.
• Strong analytical, communication, and stakeholder management skills.

Preferred Qualifications

• Certifications such as CISA, CISSP, or CRISC.
• Experience with SailPoint, Saviynt, Okta, Microsoft Entra ID (Azure AD), CyberArk, or similar IAM platforms.
• Knowledge of SOX, ISO 27001, NIST, or other compliance frameworks.
• Experience with cloud IAM environments (AWS, Azure, or GCP).
• Ability to manage multiple projects and priorities in a fast-paced environment.

Rate: $55-70/HR

Benefits Featured

Medical, Dental , and Vision Insurance is offered to qualified candidates.