IAM Compliance & Risk Analyst — IT Access Governance

9025 CVS Shared Services Resources LLC; United States; Hybrid; USD 79,000 - 173,000; Full time

Job summary

CVS Health is seeking an IAM Domain SME to join the Corporate Functions & Pharmacy Consumer Wellness IT Compliance team. You will develop and maintain the Compliance IAM governance framework and bridge between application teams and security or policy stakeholders.

The role focuses on implementing access controls, leading gap remediation, and ensuring regulatory alignment across PCI, HIPAA, SOX, NIST and other standards. Hybrid work in RI/MA is supported.

Qualifications

• 3+ years of hands-on IAM experience with access reviews and MFA.
• Experience with identity governance platforms and IAM tech stacks.
• Experience in cloud IAM in AWS/Azure/GCP.
• Strong analytical, problem-solving and organizational skills.
• Excellent written and verbal communication with stakeholders.
• Ability to work independently with minimal supervision.
• Familiarity with PCI, HIPAA, SOX, SOC1/SOC2, HITRUST, GDPR, NIST, ISO 27001.
• Experience with cross-team collaboration on security projects.

Responsibilities

• Develop and implement a Compliance IAM governance framework aligned with industry practices and regulations.
• Guide application teams in identifying IAM gaps and remediation plans for non-conformance.
• Assess IT policies and control standards for system compliance.
• Maintain data sources for governance and reporting, ensuring data quality and integrity.
• Create and maintain process docs, job-aids, FAQs, and support materials.
• Promote IAM best practices and regulatory compliance (PCI, HIPAA, SOX, NIST, etc.).
• Stay updated on trends and evolving IAM technologies and threats.

Skills

IAM concepts

IAM hands-on

Cloud IAM

Excel

Cross-team projects

Problem solving

Communication

Independent worker

Task management

Security regulations

Education

Bachelor’s Degree in CS/IT/Cybersecurity

Tools

SailPoint

BeyondTrust

Active Directory

Ping Identity

SSO

SAML

OAuth

LDAP

Job description

CVS Health is seeking an IAM Domain SME to join the Corporate Functions & Pharmacy Consumer Wellness IT Compliance team. You will develop and maintain the Compliance IAM governance framework and bridge between application teams and security or policy stakeholders.

The role focuses on implementing access controls, leading gap remediation, and ensuring regulatory alignment across PCI, HIPAA, SOX, NIST and other standards. Hybrid work in RI/MA is supported.