IAM Compliance SME

CVS Health Corporation; Woonsocket (RI); Hybrid; USD 120,000 - 170,000; Full time

Job summary

CVS Health Corporation in Woonsocket, RI seeks an Identity and Access Management Domain SME to lead the Compliance IAM governance framework and bridge gaps between application teams and security. The role focuses on policy alignment, risk reduction, and operational IAM improvements.

The position requires deep IAM expertise, strong communication, and collaboration with IT, Security and Compliance, with hybrid/remote options and a focus on regulatory standards such as NIST, PCI, and HIPAA.

Qualifications

• Deep understanding of IAM concepts and systems including authentication, authorization, and access management.
• 3+ years hands-on IAM experience with reviews and MFA implementations.
• Experience with cloud IAM in AWS/Azure/GCP and integration with cloud services.

Responsibilities

• Develop and improve a Compliance IAM governance framework that aligns with industry best practices and regulatory requirements.
• Identify IAM gaps with application teams and develop remediation plans for non-conformance to access control requirements.
• Interpret IT policies and control standards for system and operational compliance.
• Maintain data sources for governance and reporting, including operational metrics and data quality.
• Prepare and update process documentation, job-aids, FAQs, and other support materials for application teams.
• Promote industry IAM best practices ensuring compliance with regulations such as NIST, PCI, HIPAA, SOX, and SOC.

Skills

IAM concepts

Governance & Compliance

Cloud IAM

SailPoint

Beyond Trust

Active Directory

Ping Identity

SSO

SAML

OAuth

Education

Bachelor's Degree in CS/IT/Cybersecurity

Tools

SailPoint

Beyond Trust

Active Directory

Ping Identity

SSO

SAML

OAuth

LDAP

Job description

CVS Health Corporation in Woonsocket, RI seeks an Identity and Access Management Domain SME to lead the Compliance IAM governance framework and bridge gaps between application teams and security. The role focuses on policy alignment, risk reduction, and operational IAM improvements.

The position requires deep IAM expertise, strong communication, and collaboration with IT, Security and Compliance, with hybrid/remote options and a focus on regulatory standards such as NIST, PCI, and HIPAA.