Senior IAM Governance Analyst

MeridianLink, Inc.; United States; Remote; USD 90,000 - 130,000; Full time

Job summary

MeridianLink, Inc. is seeking a Senior IAM Governance Analyst to own and optimize the enterprise Identity and Access Management (IAM) governance program.

You will ensure proper access reviews, validate scope across systems, and partner with Security, IT, Engineering, HR, and application owners to meet SOC 2, PCI DSS, and regulatory obligations. The role emphasizes operating analytics, remediation, and continuous improvement of access controls, with collaboration across IAM, Security, Compliance,

Qualifications

• 5+ years in Identity and Access Management, Information Security, IT Audit, or GRC.
• 3+ years leading User Access Reviews, access certification campaigns, or identity governance programs.
• Expert understanding of identity lifecycle management, RBAC, privileged access, entitlement analysis, and access governance best practices.
• Experience supporting compliance and audits such as SOC, PCI DSS, SOX, ISO 27001 or similar frameworks.
• Strong analytical, communication, and stakeholder management skills with ability to influence decisions.
• AI fluency and experience using AI/automation to streamline workflows.

Responsibilities

• Own the enterprise User Access Review (UAR) program from planning to remediation and reporting.
• Coordinate periodic access reviews across applications, infrastructure, cloud platforms, and privileged environments with business/system owners.
• Assess completed reviews for quality, identify excessive access or orphaned accounts, and drive remediation.
• Identify gaps in ownership, certification coverage, entitlement governance, and privileged access oversight.
• Partner with IAM, Security, Engineering, Compliance, and Audit teams to improve governance processes and support audits.
• Collaborate on cross-functional GRC initiatives and other priorities as needed.

Skills

IAM governance

UAR leadership

Identity lifecycle management

Compliance & audits

Analytical skills

Stakeholder management

AI in governance

Education

CISA/CRISC/CISSP/CGEIT certifications

Tools

SecurEnds

SailPoint

Saviynt

Entra ID Governance

Okta Governance

Job description

Senior IAM Governance Analyst

Position Summary

MeridianLink is seeking a Senior IAM Governance Analyst to own the operational execution, quality, effectiveness, and continuous improvement of the enterprise Identity and Access Management (IAM) governance program.

The ideal candidate will ensure the right access is being reviewed by the appropriate reviewers at the needed frequency; validate that all in-scope systems, privileged accounts, service accounts, contractors, and high-risk identities are included; and provide assurance that access governance controls are operating effectively across the organization.

This role partners closely with Security, IT, Engineering, HR, and application owners to ensure access governance controls support MeridianLink's SOC 2, PCI DSS, financial audit, customer assurance, and regulatory obligations.

What You'll Do

• Own the enterprise User Access Review (UAR) program from planning and execution through remediation, reporting, and continuous improvement.

• Coordinate periodic access reviews across applications, infrastructure, cloud platforms, and privileged access environments while partnering with business and system owners to ensure access remains appropriate.

• Assess completed reviews for quality and effectiveness, identify excessive access, orphaned accounts, segregation of duties concerns, and other access-related risks, and drive remediation activities to completion.

• Identify gaps in application ownership, certification coverage, entitlement governance, and privileged access oversight.
• Partner with IAM, Security, Engineering, Compliance, and Audit teams to improve governance processes, support audits and assessments, and strengthen MeridianLink's access management controls.
• Collaborate on cross-functional GRC initiatives and support other GRC projects and priorities as needed.

What You Bring

• 5+ years of experience in Identity and Access Management, Information Security, IT Audit, or Governance, Risk & Compliance.

• 3+ years of experience leading User Access Reviews, access certification campaigns, or identity governance programs.

• Expert understanding of identity lifecycle management, role-based access controls, privileged access concepts, entitlement analysis, and access governance best practices.

• Experience supporting compliance and audit initiatives such as SOC, PCI DSS, SOX, ISO 27001, or similar regulatory and control frameworks.

• Strong analytical, communication, and stakeholder management skills with the ability to influence decisions and challenge ineffective review practices.

• AI fluency and experience leveraging AI and automation tools to streamline workflows, improve efficiency, and strengthen governance processes.

Qualifications

• Experience with SecurEnds, SailPoint, Saviynt, Entra ID Governance, Okta Governance, or similar IGA platforms.

• Experience in regulated financial, lending, fintech, or SaaS environments.

• Familiarity with Azure, Active Directory, Entra ID, cloud platforms, and enterprise applications.

• CISA, CRISC, CISSP, CGEIT, or similar certifications is a plus.