Job Description
IAM Governance & User Access Review Analyst
The role is primarily focused on IAM Governance Operations and User Access Review (UAR) Program Management.
Job SummaryWe are seeking an experienced IAM Governance professional to support and manage User Access Review (UAR) activities across the organization. This is a highly operational role focused on access review execution, governance, audit readiness, stakeholder engagement, training, documentation, monitoring, and compliance.
The ideal candidate will have strong experience in access review programs, audit controls, compliance requirements, SOP creation, business communications, and governance processes. This role is not focused on IAM engineering, SailPoint development, SSO, or platform administration.
Key ResponsibilitiesUser Access Review (UAR) Program ManagementIdentify and evaluate existing tools and processes available within the organization for conducting access reviews.Determine the most effective operational approach for applications not onboarded to SailPoint.Coordinate and manage manual and tool-based access review processes.Develop execution plans and monitor progress of access reviews across business units.Track review completion, remediation activities, and compliance status.Governance & ComplianceEnsure access reviews comply with internal policies and regulatory requirements.Validate review results and ensure all identified access has an approved disposition.Verify evidence of access removals and remediation actions.Support audit requests and maintain audit-ready documentation.Documentation & TrainingDevelop SOPs, operating procedures, training guides, job aids, templates, and tracking mechanisms.Conduct training sessions for application owners, business stakeholders, and access reviewers.Collaborate with internal communications teams to drive awareness and adoption of new processes.Monitoring & ReportingCreate and maintain tracking dashboards, metrics, and status reports.Escalate delays and compliance risks as necessary.Provide recurring updates to leadership and governance teams.Stakeholder EngagementWork closely with application owners, business units, compliance teams, audit teams, and IAM leadership.Serve as a governance advisor for access review execution and control adherence.Required Qualifications5+ years of experience in IAM Governance, Access Governance, Compliance, Audit, Risk Management, or User Access Reviews.Hands-on experience managing User Access Review (UAR) programs.Experience developing SOPs, training materials, and governance documentation.Experience supporting SOX, internal audits, external audits, or compliance reviews.Strong stakeholder management and communication skills.Strong organizational, analytical, and reporting capabilities.Preferred SkillsUser Access Reviews (UAR)Access Certification ProgramsIAM GovernanceAudit & ComplianceSOX ControlsRisk ManagementPolicy & Procedure DevelopmentStakeholder ManagementTraining & CommunicationsReporting & Metrics
Please focus on candidates with the following experience:User Access Reviews (UAR) and Access Certification ProgramsAccess Governance and Compliance OperationsSOX, Audit, Controls, Risk, and Compliance supportDeveloping SOPs, procedures, training materials, and process documentationConducting business training sessions and stakeholder communicationsWorking with application owners, auditors, and business usersTracking, reporting, validation, and evidence collection for access reviewsReviewing access removal evidence and ensuring audit readinessManaging manual access review processes (spreadsheets, workflows, reporting templates, etc.)Experience executing and managing access reviews for applications not onboarded to SailPointProfiles that are NOT a fit:SailPoint Developers/EngineersIAM ArchitectsSSO/MFA EngineersPing/Okta Federation SpecialistsCIAM EngineersCandidates whose experience is primarily implementation, development, coding, connector development, or tool administrationImportant:The client is looking for someone who can:Identify existing tools/processes available within the organizationDevelop operational processes around access reviewsTrain business stakeholdersMonitor completion and complianceValidate review results and remediation activitiesEnsure the process stands up to audit scrutinyPlease submit only candidates with strong IAM Governance, Access Review Operations, Audit/Compliance, and Business Engagement experience.
