IAM Security Posture Lead (Hybrid)

The Judge Group; Long Grove (IL); Hybrid; USD 120,000 - 145,000; Full time

Benefits offered by this job

Top-tier healthcare

401k

Comprehensive benefits package

Job summary

Fortune 500 is seeking an IAM Security Specialist to mature and monitor identity security posture across IAM/IGA and PAM programs. This hybrid, permanent role requires USC or GC status and offers a strong benefits package.

Responsibilities include identifying identity exposures, coordinating remediation with owners, and producing audit-ready artifacts for SOX/ITGC/compliance. The candidate will work with IT, security, and application teams to reduce risk.

Qualifications

• Bachelor's degree or an equivalent mix of education and experience in Information Cyber Security, Risk Management and Governance Risk and Compliance.
• 7+ years of relevant experience in third-party cyber and data risk management and conducting third-party cyber and data risk assessments.
• Experience with reviewing and negotiating cyber and data security contract language.
• Expert knowledge of cyber and data security and risk disciplines and practices.

Responsibilities

• Identity posture monitoring & exposure management.
• Operate and mature the Identity Security Posture Management capability (ISPM) to discover identity exposures across Identity Providers (e.g., Entra ID/AD), SaaS applications, cloud environments, and critical business systems.
• Identify and track identity security issues such as excessive privileges, dormant accounts, misconfigured admin roles, weak authentication enforcement, privilege escalation paths, and risky third-party access.
• Maintain an Identity Exposure Register with severity, business impact, owner, remediation plan, and due dates; enforce SLA-based remediation for critical findings.
• Risk prioritization & remediation orchestration
• Triage and prioritize findings using risk-based methods (e.g., likelihood/impact, exploitability, business criticality).
• Coordinate remediation with system owners: role redesign, least privilege enforcement, MFA coverage improvements, privileged role controls, conditional access, and entitlement clean-up.
• Drive reduction of inappropriate combinations and segmentation-of-duties issues where relevant.
• Controls, audit, and compliance enablement
• Provide evidence to support identity-related controls (e.g., privileged access governance, MFA enforcement, access review/UAR posture, joiner-mover-leaver quality, service account governance).
• Produce audit-ready reporting and artifacts for internal audit and external auditors (SOX/ITGC/GITC reliance, regulator exams).
• Ensure posture findings are connected to policy/standard requirements and tracked through governance workflows.

Skills

IAM/IGA expertise

Security operations

Risk management

Audit & compliance

Stakeholder collaboration

Strong communication

Education

Bachelor's degree or equivalent in Information Cyber Security, Risk Management and Governance Risk and Compliance

Tools

Entra ID/AD

SailPoint

CyberArk

AWS/Azure identity constructs

Job description

Fortune 500 is seeking an IAM Security Specialist to mature and monitor identity security posture across IAM/IGA and PAM programs. This hybrid, permanent role requires USC or GC status and offers a strong benefits package.

Responsibilities include identifying identity exposures, coordinating remediation with owners, and producing audit-ready artifacts for SOX/ITGC/compliance. The candidate will work with IT, security, and application teams to reduce risk.