Note: The job is a remote job and is open to candidates in USA. IntePros is partnered with a global pharmaceutical services client to identify a Senior IAM Audit & Compliance Analyst to support enterprise Identity and Access Management (IAM) governance, audit readiness, and regulatory compliance initiatives. This role serves as a key liaison between IAM, Information Security, Internal Audit, IT Compliance, and business stakeholders to ensure IAM controls are effectively designed, executed, documented, and continuously improved.
Responsibilities
- Serve as the primary point of contact for IAM-related internal audits, external audits, regulatory assessments, and compliance reviews
- Coordinate audit walkthroughs, evidence collection, documentation, control testing, and remediation activities from planning through completion
- Maintain audit readiness by ensuring IAM controls are consistently executed, properly documented, and supported by auditable evidence repositories
- Monitor and track audit findings, compliance issues, risk items, and remediation plans, partnering with stakeholders to ensure timely resolution
- Develop, maintain, and oversee Segregation of Duties (SoD) governance, including SoD matrices, risk assessments, and mitigation activities
- Act as a control owner or delegate for preventive and detective IAM controls while periodically evaluating control effectiveness and maturity
- Manage IAM policy documentation, control standards, procedures, and governance artifacts, ensuring alignment with regulatory and industry frameworks including SOX, HIPAA, GDPR, NIST, HITRUST, PCI-DSS, and internal security standards
- Review, govern, and document IAM policy exceptions, including risk acceptance, compensating controls, approval workflows, and periodic recertification
- Validate the effectiveness of User Access Review (UAR) and access certification programs to ensure compliance with audit and regulatory expectations
- Partner with cross-functional teams—including Infrastructure, Application Owners, Human Resources, IT Compliance, Information Security, and Internal Audit—to drive remediation efforts and strengthen governance processes
- Provide IAM governance and compliance guidance for new technologies, system implementations, and enterprise initiatives
- Analyze IAM and access governance data to validate completeness, accuracy, and compliance using Microsoft Excel and other reporting tools
- Assist in evaluating and implementing IAM technologies that improve governance, compliance, and operational efficiency
- Support incident response reviews and incorporate lessons learned into IAM control improvements
- Develop dashboards, metrics, and executive reporting to communicate audit status, compliance performance, risks, and remediation progress
- Contribute to the continuous improvement of IAM governance processes, documentation, and operational standards
Skills
- Bachelor's degree in Computer Science, Information Technology, Cybersecurity, Information Systems, or a related discipline, or equivalent professional experience
- 5+ years of experience in Identity and Access Management, Information Security, IT Audit, Risk Management, or Compliance within a large enterprise environment
- Demonstrated experience supporting SOX, Internal Audit, external audit, regulatory assessments, and compliance activities related to Identity and Access Management
- Experience managing audit findings, evidence collection, control testing, issue remediation, and audit response activities
- Strong understanding of Identity Governance and Administration (IGA), access controls, user access reviews, identity lifecycle management, and IAM governance best practices
- Working knowledge of security and compliance frameworks including SOX, NIST, HIPAA, GDPR, HITRUST, PCI-DSS, SOC 1, and SOC 2
- Advanced analytical and problem-solving skills with exceptional attention to detail
- Strong communication and relationship management skills with the ability to effectively engage both technical and non-technical stakeholders
- Advanced Microsoft Excel skills, including Pivot Tables, Power Query, data analysis, and reporting
- Experience with SailPoint IdentityIQ or IdentityNow
- Experience with Governance, Risk, and Compliance (GRC) platforms such as ServiceNow GRC, AuditBoard, or Archer
- Familiarity with Active Directory, Microsoft Entra ID (Azure Active Directory), and ServiceNow
- Professional certifications such as: Certified Information Systems Auditor (CISA), Certified Information Security Manager (CISM), Certified Information Systems Security Professional (CISSP), Certified in Risk and Information Systems Control (CRISC), Certified Identity and Access Manager (CIAM)
Company Overview
Company H1B Sponsorship