IAM Detective Controls Analyst II - Remote/Hybrid

CardWorks, Inc.; Town of Woodbury (NY); Hybrid; USD 89,000 - 98,000; Full time

Job summary

CardWorks Financial Group is hiring an Information Security Risk Analyst II in Woodbury, NY. The role leads IAM detective controls, especially User Access Reviews and access certifications, coordinating across multiple applications and stakeholders to ensure accurate data and audit-ready evidence.

You will work with IAM engineers and business teams to improve control effectiveness, support automation, and uphold SOX/SOC controls in a hybrid environment with optional remote work.

Qualifications

• Bachelor's degree in Information Security, Information Technology, Computer Science, Business, or related field.
• 3+ years in Identity and Access Management, information security, IT risk or related tech function.
• 3+ years of SailPoint experience required; Delinea experience preferred.
• Experience with User Access Reviews, access certifications, and access reconciliations.
• Experience analyzing user, account, role, entitlement, or application access data.
• Experience working with stakeholders to facilitate recurring control activities.
• Familiarity with SOX/SOC1/SOC2 or similar regulatory requirements is a plus.

Responsibilities

• Facilitate IAM detective controls focusing on UARs and access certifications.
• Coordinate end-to-end execution of UARs, including prep, reviewer engagement, and evidence retention.
• Ensure data completeness and accuracy for access review populations.
• Review results to identify exceptions, policy violations, or remediation needs.
• Support additional controls including access reconciliations and privileged access reviews.
• Maintain documentation and evidence of control execution and completion.
• Assist with automation of data collection, validation, and reporting.
• Collaborate with IAM engineering and platform teams to improve data, integrations, and automation.
• Participate in testing and validation of new IAM control capabilities.

Skills

IAM concepts

User Access Reviews

Access certifications

SailPoint

Delinea

Automation capabilities

Data analysis

Stakeholder communication

Education

Bachelor's degree

Tools

SailPoint

Delinea

Job description

CardWorks Financial Group is hiring an Information Security Risk Analyst II in Woodbury, NY. The role leads IAM detective controls, especially User Access Reviews and access certifications, coordinating across multiple applications and stakeholders to ensure accurate data and audit-ready evidence.

You will work with IAM engineers and business teams to improve control effectiveness, support automation, and uphold SOX/SOC controls in a hybrid environment with optional remote work.