IAM Audit Analyst

Apex Systems; Chicago, Northern (IL, KY); On-site; USD 95,000 - 130,000; Full time

Benefits offered by this job

Medical, dental, vision insurance

ESPP

401K with company match

HSA

EAP with counseling

Discount program

Training & certification discounts

Job summary

Everforth Apex Systems seeks an IAM Audit Analyst in Chicago to lead audits of Identity and Access Management, IT controls, and cybersecurity. You will guide testing, evaluate evidence, and collaborate with stakeholders to define scope and testing strategies that ensure strong governance and compliant access management processes.

You will oversee provisioning, de-provisioning, access reviews, and PAM testing while coordinating with risk, tech, and business teams to close gaps and drive

Qualifications

• 5–10 years in IT Audit, Risk, Controls, or IAM-focused audits.
• Strong knowledge of audit standards, methodologies, and procedures.
• Understanding of IAM concepts and cybersecurity risks.
• Experience with IAM tools and access governance.

Responsibilities

• Lead IAM/audit projects including ITGC, information security, and governance.
• Oversee IAM audit requests and evidence collection with stakeholders.
• Define scope, objectives, and testing strategies based on risk.
• Develop evidence testing timelines aligned with scope and risk.
• Draft findings, reports, and remediation recommendations.
• Coordinate with cross-functional teams to cover risk areas.

Skills

IAM principles (RBAC/PAM)

IT audit & controls

Risk assessment & testing docs

Stakeholder management & comms

IAM technologies familiarity

Education

Tools

SailPoint

Saviynt

Okta

Azure AD

CyberArk

Job description

IAM Audit Analyst

Location: Chicago, Illinois (Partial Remote)

Role Overview

We are seeking an IAM Audit Analyst to lead audit engagements focused on Identity and Access Management (IAM), IT controls, and cybersecurity. This role involves overseeing the execution of audit requests, evaluating evidence, and collaborating with stakeholders to define scope and develop effective testing documentation. You will provide technical expertise in risk, controls, and IAM technologies to ensure strong governance and compliance across access management processes.

Key Responsibilities

• Lead projects related to Identity and Access Management (IAM) controls, IT General Controls (ITGC), information security, and IT governance.
• Provide oversight and guidance to stakeholders on IAM Audit requests and Evidence Requests.
• Partner with implementation owners to define audit scope, objectives, and develop appropriate testing strategies based on risk assessment.
• Assist in developing evidence testing timelines based on scope and risk.
• Finalize and review audit planning and scoping documentation.
• Conduct and review walkthroughs and testing of application controls, interface controls, and IAM processes such as provisioning, de-provisioning, access reviews, and Privileged Access Management (PAM).
• Ensure work meets departmental standards and quality requirements.
• Analyze implementation plans and follow up on milestones for issues identified by internal teams and auditors.
• Work with stakeholders across business, technology, risk, and control functions to drive issue resolution and remediation tracking.
• Communicate audit status and findings to business stakeholders and leadership.
• Draft audit findings, reports, and recommendations for status updates and closure packages.
• Identify and evaluate risks, control gaps, and remediation actions.
• Coordinate with other teams to ensure comprehensive coverage of risk areas.

Required Qualifications

• 5–10 years of experience in IT Audit, Risk, Controls, or IAM-focused audits.
• Knowledge of audit standards, methodologies, and procedures.
• Understanding of IT systems, applications, and cybersecurity risks.
• Knowledge of Identity and Access Management (IAM) principles, including user lifecycle management, role-based access control (RBAC), and Privileged Access Management (PAM).
• Experience with IAM technologies such as SailPoint, Saviynt, Okta, Azure AD, or CyberArk.
• Understanding of IT General Controls (ITGC) and compliance frameworks (SOX, ISO, etc.).
• Ability to lead and execute walkthroughs, design, and operational effectiveness testing.
• Analytical, documentation, and reporting skills.
• Communication and stakeholder management skills.

Preferred Qualifications

• Certifications such as CISA, CISSP, or CRISC.
• Experience in IAM governance, access certification programs, and Cloud IAM environments (Azure, AWS, GCP).
• Ability to manage multiple projects simultaneously and meet deadlines.

Employer

Everforth Apex is a world-class IT services company that serves thousands of clients across the globe.

When you join Everforth Apex, you become part of a team that values innovation, collaboration, and continuous learning. We offer quality career resources, training, certifications, development opportunities, and a comprehensive benefits package. Our commitment to excellence is reflected in many awards, including ClearlyRateds Best of Staffing® in Talent Satisfaction in the United States and Great Place to Work® in the United Kingdom and Mexico.

Benefits Overview

• Medical, dental, vision, life, disability, and other insurance plans that offer an optional layer of financial protection.
• ESPP (employee stock purchase program).
• 401K program which allows you to contribute typically within 30 days of starting, with a company match after 12 months of tenure.
• HSA (Health Savings Account on the HDHP plan).
• SupportLinc Employee Assistance Program (EAP) with up to 8 free counseling sessions.
• Corporate discount savings program and other discounts.
• On-demand training program, certification prep and a library of technical and leadership courses/books/seminars once you have 6+ months of tenure, and certification discounts and other perks to associations that include CompTIA and IIBA.

Equal Opportunity

Everforth Apex Systems is an equal opportunity employer. We do not discriminate or allow discrimination on the basis of race, color, religion, creed, sex (including pregnancy, childbirth, breastfeeding, or related medical conditions), age, sexual orientation, gender identity, national origin, ancestry, citizenship, genetic information, registered domestic partner status, marital status, disability, status as a crime victim, protected veteran status, political affiliation, union membership, or any other characteristic protected by law. Everforth Apex will consider qualified applicants with criminal histories in a manner consistent with the requirements of applicable law.

ADA Accommodation

If you require an accommodation under the Americans with Disabilities Act to participate in an interview with a virtual recruiter or to use our website for a search or application, please contact our Benefits Department at [e-mail] or 804-523-8228. Please note that this contact information is strictly to be used for medical ADA accommodations and that no other inquiries will be answered.

UnitedHealthcare creates and publishes the Transparency in Coverage Machine-Readable Files on behalf of Everforth Apex Systems.