Senior IAM Governance Lead - Access & Compliance

MeridianLink, Inc.

Oregon

Hybrid

USD 120,000 - 150,000

Full time

5 days ago

Be an early applicant

A complete application in a minute

Tailored resume and cover letter, ready to send.

Get past ATS filters

Job summary

MeridianLink, Inc. is seeking a Senior IAM Governance Analyst to own the enterprise access governance program, ensuring proper review cadence and coverage across systems. You will partner with Security, IT, and stakeholders to strengthen controls for SOC 2, PCI DSS, and regulatory obligations.

The role emphasizes risk-based review, remediation leadership, and leveraging AI tools to streamline governance workflows and improve efficiency.

Qualifications

5+ years in Identity and Access Management, Information Security, IT Audit, or Governance, Risk & Compliance.
3+ years leading User Access Reviews, access certification campaigns, or identity governance programs.
Expert understanding of identity lifecycle management, RBAC, privileged access concepts, entitlement analysis, and access governance best practices.
Experience supporting compliance and audit initiatives such as SOC, PCI DSS, SOX, ISO 27001, or similar regulatory and control frameworks.
Strong analytical, communication, and stakeholder management skills with the ability to influence decisions and challenge ineffective review practices.
AI fluency and experience leveraging AI and automation tools to streamline workflows, improve efficiency, and strengthen governance processes.

Responsibilities

Own the enterprise User Access Review (UAR) program from planning and execution through remediation, reporting, and continuous improvement.
Coordinate periodic access reviews across applications, infrastructure, cloud platforms, and privileged access environments while partnering with business and system owners to ensure access remains appropriate.
Assess completed reviews for quality and effectiveness, identify excessive access, orphaned accounts, segregation of duties concerns, and other access-related risks, and drive remediation activities to completion.
Identify gaps in application ownership, certification coverage, entitlement governance, and privileged access oversight.
Partner with IAM, Security, Engineering, Compliance, and Audit teams to improve governance processes, support audits and assessments, and strengthen MeridianLink's access management controls.
Collaborate on cross-functional GRC initiatives and support other GRC projects and priorities as needed.