IAM Security & Access Governance Specialist

Popular; Jacksonville (FL); Hybrid; USD 90,000 - 120,000; Full time

Job summary

Popular is looking for an IAM Security Specialist to lead MSSP oversight ensuring user access across systems aligns with organizational policies and regulatory requirements (FRB, NYDFS, GDPR, NIST). You will validate access, enforce IAM controls, and promote security of the IAM environment through proactive monitoring and continuous improvement.

Reporting to the IAM Operations Manager, you will coordinate access governance activities, review user access certifications, identify control gaps, and

Qualifications

• Bachelor’s degree in information systems, cybersecurity, computer science, or related discipline (or equivalent work experience).
• 3-5 years of experience in identity and access management, access governance, security administration, IT audit, compliance, or a similar role.
• Practical experience administering, supporting, or providing governance oversight for IAM platforms such as Saviynt, SailPoint, or equivalent technologies.
• Proficiency with Active Directory, LDAP, SSO, and other IAM technologies (e.g., Saviynt, SailPoint).
• Strong understanding of authentication, authorization, RBAC, least privilege, segregation of duties, and access certification concepts.
• Demonstrated ability to analyze, troubleshoot, and resolve moderately complex issues related to identities, access, accounts, authentication, authorization, entitlements, and permissions.
• Experience developing, reviewing, and improving written documentation for identity and access management processes, controls, procedures, and audit evidence.
• Strong organizational, analytical, and problem-solving skills, with the ability to manage multiple priorities, identify process gaps, and recommend practical solutions.
• Effective verbal and written communication skills, with the ability to guide MSSP resources, collaborate with technical and non-technical stakeholders, and communicate risks, findings, and recommendations clearly.
• Familiarity with banking services, policies, procedures, and regulatory compliance requirements (such as AML/BSA/Cyber Security) is a plus.

Responsibilities

• Lead oversight and quality validation of the MSSP’s user account lifecycle activities, including creation, modification, deletion of user accounts, and management of user roles and permissions, ensuring adherence to organizational policies, standards, and regulatory requirements.
• Monitor, assess, and escalate MSSP handling of end-user password resets and access requests to ensure timely resolution, SLA adherence, and compliance with established security protocols.
• Evaluate the MSSP’s implementation and enforcement of access control policies and procedures, validating that access is appropriate, authorized, and aligned with least privilege and segregation of duties principles.
• Lead coordination and review of access management incident response activities, ensuring timely resolution, effective escalation, root cause analysis, and documentation of corrective actions.
• Identify and recommend opportunities to improve IAM processes through automation, standardization, and enhanced controls, while supervising MSSP implementation and operational adoption.
• Manage escalations and complex issue resolution with the MSSP, application owners, and business stakeholders related to access management, role assignments, and certification concerns.
• Track, analyze, and report on MSSP remediation efforts associated with access review findings, ensuring issues are resolved timely and recurring trends are identified for management attention.
• Provide direction, review, and quality assurance for the MSSP’s configuration, execution, and completion of periodic access certification campaigns, including application data, user access, enterprise roles and entitlements, and service and generic account reviews.
• Support and enhance the RBAC lifecycle by validating role data, analyzing access patterns, reviewing role definitions, and partnering with stakeholders to improve role quality and governance outcomes.
• Maintain oversight of access governance documentation managed by the MSSP, including review schedules, process workflows, and audit evidence.
• Partner with application owners and business stakeholders to gather requirements, assess access needs, and guide improvements to Enterprise Role design, quality, and sustainability.
• Provide oversight and guidance to the MSSP in delivering user training and support on IAM policies, procedures, and system usage, ensuring consistency and clarity for all users.
• Monitor and maintain oversight of written procedure documentation related to identity and access management provisioning, terminations, and transfers, verifying that MSSP practices align with organizational standards.
• Provide oversight and guidance to the MSSP in delivering user training and support on IAM policies, procedures, and system usage, ensuring consistent communication and understanding across the organization.
• Coordinate identity access management-related audit requests, including evidence collection, validation, issue follow-up, and timely response to internal and external auditors.

Skills

Access governance

RBAC

Authentication

Authorization

Least privilege

Separation of duties

Access certification

Analytical

Education

Bachelor’s degree in information systems, cybersecurity, computer science

Tools

Saviynt

SailPoint

Active Directory

LDAP

SSO

Job description

Popular is looking for an IAM Security Specialist to lead MSSP oversight ensuring user access across systems aligns with organizational policies and regulatory requirements (FRB, NYDFS, GDPR, NIST). You will validate access, enforce IAM controls, and promote security of the IAM environment through proactive monitoring and continuous improvement.

Reporting to the IAM Operations Manager, you will coordinate access governance activities, review user access certifications, identify control gaps, and