Senior IAM Governance Analyst

Role overview

Lead the day-to-day operation and improvement of an enterprise identity and access governance program. The role ensures that access reviews cover the right people, systems, and accounts, and that review outcomes and controls meet audit and regulatory expectations.

Responsibilities

- Plan and run user access reviews from launch through follow-up, remediation, and reporting. - Coordinate reviews across applications, infrastructure, cloud environments, and privileged access, working with business and system owners. - Evaluate completed reviews for quality and identify excessive permissions, inactive or ownerless accounts, segregation-of-duties issues, and other risks. - Track remediation through completion and identify gaps in application ownership, certification coverage, entitlement governance, and privileged access oversight. - Work with security, IAM, engineering, compliance, and audit partners to improve processes and support audits and assessments.

Requirements

- At least five years of experience in IAM, information security, IT audit, or governance, risk, and compliance. - At least three years leading access reviews, certification campaigns, or identity governance programs. - Understanding of identity lifecycle management, role-based access, privileged access, entitlement analysis, and access governance. - Experience supporting audits or compliance programs involving frameworks such as SOC, PCI DSS, SOX, or ISO 27001. - Strong analytical, communication, and stakeholder management skills, including the ability to challenge ineffective review practices.