Identity Process and Compliance Analyst

Hruckus; United States; Remote; USD 90,000 - 130,000; Full time

Job summary

HRUCKUS is seeking an experienced Identity Process and Compliance Analyst to evaluate, improve, document, and maintain IAM processes, policies, and controls for a remote assignment in the United States.

The role focuses on identifying gaps between IAM procedures, regulatory requirements, and industry standards, delivering practical improvements and strengthening audit readiness across IT and security teams.

Qualifications

• 5+ years in IAM governance, cybersecurity compliance, IT audit, risk management, or related discipline.
• Experience reviewing and improving IAM policies, procedures, runbooks, and operating practices.
• Ability to identify control gaps and recommend practical improvements.
• Understanding joiner/mover/leaver processes, access approvals, and least privilege.

Responsibilities

• Review IAM policies, standards, procedures, runbooks, and approval workflows.
• Evaluate identity lifecycle processes, including onboarding, role changes, and offboarding.
• Assess access requests, approvals, privileged access, emergency access, service accounts, and access reviews.
• Identify gaps between documented controls and actual operating practices.
• Translate compliance requirements and audit observations into actionable improvements.
• Develop and maintain process maps, control narratives, procedures, runbooks, and work instructions.
• Define process ownership, approval matrices, and evidence requirements.
• Coordinate process reviews with IAM, infrastructure, applications, HR, security, audit, and compliance teams.
• Support audit preparation, evidence collection, control testing, and remediation tracking.
• Develop process metrics, control indicators, and reporting requirements.

Skills

IAM governance

Cybersecurity compliance

IT audit

Process analysis

Stakeholder facilitation

Documentation

Remote work

Tools

Saviynt

SailPoint

Microsoft Entra ID Governance

CyberArk

BeyondTrust

Job description

Veteran Firm Seeking an Identity Process and Compliance Analyst for a Remote Assignment in Remote, US

My name is Stephen Hrutka. I lead a Veteran-Owned management consulting firm in Washington, DC. We specialize in Technical and Cleared Recruiting for the Department of Defense (DoD), the Intelligence Community (IC), and other advanced defense agencies.

At HRUCKUS, we support fellow Veteran-Owned businesses by helping them recruit for positions across organizations such as the VA, SBA, HHS, DARPA, and other leading-edge R&D-focused defense agencies.

We seek to fill an Identity Process and Compliance Analyst role in Remote, US

The ideal candidate is a Remote resident with 5+ years of experience in IAM governance, cybersecurity compliance, IT audit, and process analysis, along with preferred experience in NERC CIP compliance and critical infrastructure environments.

Thanks,

www.hruckus.com

Executive Summary:

HRUCKUS is looking for an experienced Identity Process and Compliance Analyst to evaluate, improve, document, and maintain identity and access management (IAM) processes, policies, and controls.

Position Description:

This role focuses on identifying gaps between existing IAM procedures, actual operating practices, regulatory requirements, and industry standards. The analyst will recommend practical improvements, strengthen audit readiness, and help implement sustainable IAM governance processes.

Position Responsibilities:

• Review IAM policies, standards, procedures, runbooks, and approval workflows.
• Evaluate identity lifecycle processes, including onboarding, role changes, and offboarding.
• Assess access requests, approvals, privileged access, emergency access, service accounts, and access reviews.
• Identify gaps between documented controls and actual operating practices.
• Translate compliance requirements and audit observations into actionable process improvements.
• Develop and maintain process maps, control narratives, procedures, runbooks, and work instructions.
• Define process ownership, approval matrices, and evidence requirements.
• Coordinate process reviews with IAM, infrastructure, applications, HR, security, audit, and compliance teams.
• Support audit preparation, evidence collection, control testing, and remediation tracking.
• Develop process metrics, control indicators, and reporting requirements.
• Maintain documentation version control, ownership, and review schedules.
• Support change management, stakeholder communications, training, and process adoption.

Required Qualifications:

• 5+ years of experience in IAM governance, cybersecurity compliance, IT audit, risk management, IT process analysis, or a related discipline.
• Experience reviewing and improving IAM policies, procedures, runbooks, and operating practices.
• Experience evaluating documented procedures and operational practices to identify control gaps.
• Understanding of joiner, mover, and leaver processes, access approvals, access reviews, privileged access, and least privilege.
• Strong process mapping and technical documentation experience.
• Ability to identify control gaps and recommend practical improvements.
• Experience interpreting audit findings, regulatory requirements, and control objectives.
• Understanding of IT general controls, evidence requirements, remediation, and control testing.
• Experience supporting audit readiness and compliance activities.
• Strong experience creating process maps, procedures, control narratives, work instructions, and remediation plans.
• Ability to facilitate discussions across technical and business teams.
• Working knowledge of identity lifecycle management, Joiner/mover/leaver processes, access requests and approvals, privileged access management, access certifications and reviews, segregation of duties, least-privilege principles, and service account governance.
• Experience documenting controls, procedures, evidence requirements, and remediation plans.
• Ability to interpret regulatory and technical requirements.
• Strong stakeholder facilitation and interviewing skills.
• Excellent written and verbal communication skills.
• Ability to work independently in a remote environment.

Desired Qualifications:

• Experience with NERC CIP compliance.
• Electric utility or critical infrastructure industry experience.
• SOX compliance and IT general controls.
• NIST, ISO 27001, or COBIT frameworks.
• Audit preparation, control testing, and evidence collection.
• IAM platforms such as Saviynt, SailPoint, Microsoft Entra ID Governance, CyberArk, and BeyondTrust.
• Organizational change management and process adoption experience.
• Preferred Certifications: CISA, CRISC, CISSP, CISM, ITIL, NERC CIP training, or comparable certifications.

Details:

Job Title: Identity Process and Compliance Analyst

Location: Remote, US (Central Time business hours preferred)