IAM Risk & Access Analyst II — Access Governance

CardWorks; United States; Hybrid; USD 89,000 - 98,000; Full time

Benefits offered by this job

Competitive pay & bonus

Medical, dental, vision

401(k) match

Disability insurance

Wellness programs

Paid time off

Job summary

CardWorks is seeking an IAM Analyst II to lead identity and access management controls across multiple applications. You will manage User Access Reviews, data validation, and remediation tracking, collaborating with engineering, cybersecurity, risk, and audit teams to ensure audit-ready controls.

The role emphasizes operational discipline, process improvement, and automation to reduce manual effort while maintaining strong governance and compliance posture.

Qualifications

• Bachelor’s degree or equivalent in information security, IT, CS, business, or related field.
• 3+ years in IAM, information security, IT risk, or related tech function.
• 3+ years of SailPoint experience required; Delinea preferred.

Responsibilities

• Facilitate and execute IAM detective controls, focusing on UARs and certification activities.
• Coordinate end-to-end execution of UARs: prep, initiation, reviewer engagement, completion, validation.
• Perform completeness and accuracy checks on access review data and populations.
• Review results to identify access exceptions and policy violations requiring remediation.
• Support additional detective IAM controls and monitoring activities.
• Maintain documentation and evidence of control execution and completion.

Skills

User Access Reviews

Access certifications

IAM controls

Automation

Data analysis

Stakeholder coordination

SOX/SOC1/SOC2 knowledge

Audit readiness

Education

Bachelor’s degree in Information Security/IT/CS/Business

Tools

SailPoint

Delinea

Job description

CardWorks is seeking an IAM Analyst II to lead identity and access management controls across multiple applications. You will manage User Access Reviews, data validation, and remediation tracking, collaborating with engineering, cybersecurity, risk, and audit teams to ensure audit-ready controls.

The role emphasizes operational discipline, process improvement, and automation to reduce manual effort while maintaining strong governance and compliance posture.