JOB SUMMARY
We are seeking a highly experienced Senior Identity and Access Management (IAM) Analyst with 10+ years of experience to support enterprise identity, access governance, privileged access, and security control initiatives within a regulated environment. The ideal candidate will have strong expertise in IAM operations, access certifications, user lifecycle management, CyberArk/PAM, Okta, and Active Directory.
The candidate will work closely with security, infrastructure, application, compliance, and business teams to ensure appropriate access is granted, reviewed, monitored, and removed in accordance with security policies, regulatory requirements, and least-privilege principles.
KEY RESPONSIBILITIES
- Manage identity and access activities across the employee, contractor, and third-party user lifecycle.
- Administer onboarding, transfers, role changes, and termination-related access processes.
- Provision, modify, and remove access across applications, databases, infrastructure, and privileged environments.
- Apply least-privilege and segregation-of-duties principles when evaluating access.
- Coordinate periodic user access reviews and entitlement certifications with application and business owners.
- Investigate inappropriate or excessive access and coordinate remediation activities.
- Maintain certification records, evidence, completion metrics, and audit documentation.
- Support Privileged Access Management (PAM) activities, including privileged account onboarding and access monitoring.
- Work with CyberArk to support privileged account security and access controls.
- Administer and support identity and access capabilities within Okta and Active Directory environments.
- Investigate IAM-related security events and assist with access-related incident remediation.
- Support IAM control assessments, security improvements, and control testing.
- Prepare documentation and evidence for internal audits, external audits, and regulatory examinations.
- Support remediation of IAM audit findings and development of corrective action plans.
- Ensure IAM processes align with applicable security and regulatory requirements, including SOX, FFIEC, and GLBA.
- Identify opportunities to automate and improve identity lifecycle, certification, and access management processes.
- Participate in IAM implementations, integrations, upgrades, and technology enhancements.
- Develop and maintain IAM procedures, process documentation, standards, and operational guidelines.
- Collaborate with cybersecurity, infrastructure, application, compliance, audit, and business teams.
REQUIRED QUALIFICATIONS
- 10+ years of experience in Identity and Access Management, Cybersecurity, Information Security, or a related field.
- Strong experience with enterprise IAM and access governance processes.
- Hands-on experience with user identity lifecycle management and access provisioning.
- Strong experience managing access certifications and periodic access reviews.
- Experience implementing and enforcing least privilege and segregation of duties (SoD).
- Hands-on experience with CyberArk / Privileged Access Management (PAM).
- Strong experience with Okta and Active Directory.
- Experience supporting IAM controls within regulated or highly controlled environments.
- Strong understanding of audit, risk, compliance, and security control requirements.
- Experience preparing audit evidence and supporting remediation activities.
- Strong analytical, problem-solving, documentation, and communication skills.
- Ability to work effectively with technical teams, business stakeholders, auditors, and security professionals.
PREFERRED QUALIFICATIONS
- Experience working within financial services or other highly regulated environments.
- Knowledge of SOX, FFIEC, GLBA, and related security/control requirements.
- Experience with IAM automation and workflow optimization.
- Experience integrating IAM platforms with enterprise applications and infrastructure.
- Experience with access governance platforms and identity certification solutions.
- Knowledge of cybersecurity frameworks and IAM control best practices.
- Experience supporting IAM technology implementations, migrations, and upgrades.