REMOTE--IAM Audit/Compliance, Sr. Analyst

Role Overview

Senior IAM Audit & Compliance Analyst (REMOTE)

Support enterprise Identity and Access Management (IAM) governance, audit readiness, and regulatory compliance. Act as a key liaison between IAM, Information Security, Internal Audit, IT Compliance, and business stakeholders to ensure IAM controls are designed, executed, documented, and continuously improved.

Responsibilities

• Serve as primary point of contact for IAM internal audits, external audits, regulatory assessments, and compliance reviews.
• Lead audit coordination from planning through completion: walkthroughs, evidence collection, documentation, control testing, and remediation.
• Maintain audit readiness by ensuring IAM controls are executed, properly documented, and supported by auditable evidence.
• Track and manage audit findings, compliance issues, risks, and remediation plans with stakeholders to ensure timely closure.
• Oversee Segregation of Duties (SoD) governance (SoD matrices, risk assessments, mitigations).
• Own or delegate preventive/detective IAM controls and periodically evaluate control effectiveness and maturity.
• Manage IAM policy and governance documentation and ensure alignment with frameworks including SOX, HIPAA, GDPR, NIST, HITRUST, and PCI-DSS.
• Govern and document IAM policy exceptions (risk acceptance, compensating controls, approvals, recertification).
• Validate User Access Reviews (UAR) / access certification effectiveness for audit and regulatory compliance.
• Partner cross-functionally (Infrastructure, Application Owners, HR, IT Compliance, Information Security, Internal Audit) to drive remediation.
• Provide IAM compliance guidance for new technologies and enterprise initiatives.
• Analyze IAM/access governance data for completeness and compliance using Microsoft Excel and reporting tools.
• Support evaluation and implementation of IAM technologies that improve governance and compliance.
• Assist in incident response reviews and incorporate lessons learned into IAM control improvements.
• Build dashboards, metrics, and executive reporting for audit status, compliance performance, risks, and remediation progress.
• Contribute to continuous improvement of IAM governance processes and documentation.

Requirements

• Bachelor’s degree in Computer Science, IT, Cybersecurity, Information Systems, or related field (or equivalent experience).
• 5+ years experience in IAM, Information Security, IT Audit, Risk Management, or Compliance in a large enterprise.
• Experience supporting SOX, Internal Audit, external audit, and regulatory assessments (posting cuts off after this phrase).

Nice-to-haves / Additional Signals

• Experience with SoD governance, UAR/access certification programs, and IAM policy exception/risk acceptance workflows.
• Familiarity with multiple regulatory/compliance frameworks (SOX, HIPAA, GDPR, NIST, HITRUST, PCI-DSS).