Job Description
IAM Audit & Compliance Analyst
Job SummaryWe are seeking an experienced IAM Audit & Compliance Analyst to support audit, compliance, risk, and governance activities within the Identity & Access Management organization.This role will serve as a key point of contact for IAM-related audits, assessments, regulatory reviews, evidence collection, issue remediation, control testing, and compliance reporting. The ideal candidate will possess a strong understanding of IAM governance, audit controls, regulatory frameworks, and risk management while effectively engaging with auditors, compliance teams, and business stakeholders.This is primarily a governance, compliance, and audit-focused role rather than an IAM engineering or development position.Key ResponsibilitiesAudit & Assessment ManagementServe as primary point of contact for IAM-related audits and assessments.Coordinate walkthroughs, evidence gathering, audit responses, and remediation efforts.Support internal, external, and regulatory audit engagements.Maintain audit-ready documentation and evidence repositories.Compliance & ControlsEnsure IAM controls are operating effectively and comply with policy requirements.Act as control owner or delegate for IAM preventive and detective controls.Define, maintain, and assess IAM control effectiveness and maturity.Support control testing and validation activities.Findings & Risk ManagementTrack audit findings, remediation plans, risks, and exceptions.Coordinate with stakeholders to ensure timely issue resolution.Monitor remediation progress and provide management reporting.Segregation of Duties (SoD)Develop and maintain SoD matrices.Review and identify SoD conflicts and ensure remediation.Support preventive and detective control processes.IAM GovernanceValidate User Access Review (UAR) effectiveness.Ensure certification programs meet regulatory and audit expectations.Review policy exceptions and risk acceptance documentation.Support IAM governance initiatives and control improvements.Documentation & ReportingMaintain IAM policies, control standards, workflows, and procedures.Produce audit reports, metrics, dashboards, and compliance documentation.Support regulatory reporting requirements.Data AnalysisAnalyze IAM data for completeness and accuracy.Reconcile source system access data with SailPoint and governance records.Utilize advanced Excel functions for validation, reporting, and analysis.Cross-Functional CollaborationWork closely with IAM, Compliance, Audit, Infrastructure, HR, Application Owners, and Security teams.Provide IAM governance guidance during projects and implementations.Required Qualifications5+ years of experience in IAM Governance, Information Security, Audit, Compliance, Risk Management, or Controls.Experience managing audit findings, evidence collection, remediation tracking, and control testing.Strong understanding of IAM controls and governance processes.Experience supporting SOX, Internal Audit, External Audit, and Regulatory Reviews.Strong analytical and problem-solving skills.Excellent verbal and written communication skills.Preferred CertificationsCISACISMCISSPCRISCCIAMRequired Knowledge AreasSOXSOC1SOC2HITRUSTGDPRPCI-DSSNISTIAM GovernanceAccess CertificationsUser Access Reviews (UAR)Joiner-Mover-Leaver (JML)Segregation of Duties (SoD)Privileged Access GovernanceCompliance & Risk ManagementRoot Cause AnalysisTools & TechnologiesSailPointActive DirectoryAzure AD / Entra IDServiceNowServiceNow GRCArcherAuditBoardMicrosoft Excel (Pivot Tables, Power Query, Advanced Reporting)
