IAM Risk Analyst II - Detective Controls & UARs (Hybrid)

CardWorks; New York (NY); Hybrid; USD 89,000 - 98,000; Full time

Benefits offered by this job

Bonus target

Medical, Dental, Vision

401(k) Plan

Job summary

CardWorks Financial Group is seeking an IAM Analyst II to execute Identity and Access Management detective controls, with a focus on User Access Reviews. You will coordinate UARs across applications, validate data, and manage evidence and remediation tracking in collaboration with IAM engineering, cybersecurity, risk, and audit teams.

The ideal candidate has strong operational discipline, solid IAM knowledge (SOX/SOC2), and experience with SailPoint and Delinea.

Qualifications

• Bachelor's degree in Information Security, IT, CS, or a related field.
• 3+ years of experience in Identity and Access Management, information security, IT risk, IT controls, or a related technology function.
• 3+ years of experience with SailPoint.
• 1+ year of experience with Delinea preferred.
• Experience supporting or executing User Access Reviews, access certifications, access reconciliations, or similar identity and access controls.
• Experience analyzing user, account, role, entitlement, or application access data.

Responsibilities

• Facilitate and execute IAM detective controls, with a primary focus on User Access Reviews and access certification activities.
• Coordinate the end-to-end execution of assigned UARs, including preparation, initiation, reviewer engagement, completion tracking, validation, and evidence retention.
• Perform completeness and accuracy procedures associated with access review populations and supporting data.
• Review control results to identify access exceptions, inappropriate access, policy violations, or other conditions requiring investigation or remediation.
• Support additional detective IAM controls, including access reconciliations, authentication configuration reviews, privileged access reviews, and other access-related monitoring activities.
• Maintain accurate documentation and evidence demonstrating control execution and completion.
• Escalate control issues, missed deadlines, data quality concerns, or potentially significant access findings to IAM management.
• Assist with automation of data collection, validation, reconciliation, reporting, evidence generation, and control workflows.
• Partner with IAM engineering and platform teams to improve control data, integrations, and automation capabilities.
• Participate in testing and validation of new or enhanced IAM control capabilities.

Skills

Identity and Access Management

Analytical skills

Communication skills

Organization & coordination

Data analysis

Automation & scripting

SOX/SOC2 familiarity

Education

Bachelor's degree in Information Security/IT/CS

Tools

SailPoint

Delinea

Job description

CardWorks Financial Group is seeking an IAM Analyst II to execute Identity and Access Management detective controls, with a focus on User Access Reviews. You will coordinate UARs across applications, validate data, and manage evidence and remediation tracking in collaboration with IAM engineering, cybersecurity, risk, and audit teams.

The ideal candidate has strong operational discipline, solid IAM knowledge (SOX/SOC2), and experience with SailPoint and Delinea.