Sr. IAM Analyst

Job Description/ Responsibilities
The Identity & Access Management (IAM) function is responsible for supporting and enhancing identity lifecycle and access control processes in a highly regulated financial services environment. This area ensures that access to systems, applications, and data is appropriately provisioned, monitored, reviewed, and revoked in accordance with internal policies, regulatory requirements, and industry standard practices.
Identity & Access Operations
• Administer user identity lifecycle processes, including onboarding, role changes, and offboarding across enterprise systems
• Provision, modify, and deprovision access to applications, databases, infrastructure, and privileged accounts
• Enforce least privilege and segregation of duties (SoD) principles
Access Governance & Certifications
• Coordinate and execute periodic access reviews and certifications for employees, contractors, and third parties
• Partner with system owners to validate access entitlements and remediate inappropriate access
• Track completion, evidence, and remediation metrics for audit and regulatory purposes
Privileged Access & Security Controls
• Support Privileged Access Management (PAM) solutions, including onboarding of privileged accounts and monitoring usage
• Assist in detecting, escalating, and remediating access related security issues
• Participate in IAM control design and improvements aligned to cybersecurity frameworks
Audit, Risk & Compliance Support
• Provide documentation and evidence to support internal audits, external audits, and regulatory examinations
• Address audit findings and assist in developing remediation plans related to IAM controls
• Ensure IAM processes align with regulatory expectations (e.g., SOX, FFIEC, GLBA)
Process Improvement & Automation
• Identify opportunities to streamline access processes through automation and tooling
• Participate in IAM system implementations, upgrades, and integrations
• Maintain procedures and documentation for IAM operations
• Identity & Access Management (IAM), Access Governance, User Lifecycle Management, Access Certifications
• CyberArk/PAM
• Okta
• Active Directory