IAM Audit/Compliance, Sr. Analyst

IntePros is partnered with a global pharmaceutical services client to identify a Senior IAM Audit & Compliance Analyst to support enterprise Identity and Access Management (IAM) governance, audit readiness, and regulatory compliance initiatives. This role serves as a key liaison between IAM, Information Security, Internal Audit, IT Compliance, and business stakeholders to ensure IAM controls are effectively designed, executed, documented, and continuously improved.

The successful candidate will lead audit coordination efforts, support regulatory assessments, oversee remediation activities, and help strengthen the organization's IAM control environment. This individual will play an integral role in maintaining compliance with internal policies and external regulatory frameworks while driving operational excellence across the IAM program.

The ideal candidate is highly organized, analytical, and experienced in managing audit engagements within a large enterprise environment. In addition to audit and compliance responsibilities, this role will contribute to broader IAM governance initiatives, including identity lifecycle management, access governance, user access reviews, and policy development.

Responsibilities

• Serve as the primary point of contact for IAM-related internal audits, external audits, regulatory assessments, and compliance reviews.
• Coordinate audit walkthroughs, evidence collection, documentation, control testing, and remediation activities from planning through completion.
• Maintain audit readiness by ensuring IAM controls are consistently executed, properly documented, and supported by auditable evidence repositories.
• Monitor and track audit findings, compliance issues, risk items, and remediation plans, partnering with stakeholders to ensure timely resolution.
• Develop, maintain, and oversee Segregation of Duties (SoD) governance, including SoD matrices, risk assessments, and mitigation activities.
• Act as a control owner or delegate for preventive and detective IAM controls while periodically evaluating control effectiveness and maturity.
• Manage IAM policy documentation, control standards, procedures, and governance artifacts, ensuring alignment with regulatory and industry frameworks including SOX, HIPAA, GDPR, NIST, HITRUST, PCI-DSS, and internal security standards.
• Review, govern, and document IAM policy exceptions, including risk acceptance, compensating controls, approval workflows, and periodic recertification.
• Validate the effectiveness of User Access Review (UAR) and access certification programs to ensure compliance with audit and regulatory expectations.
• Partner with cross-functional teams—including Infrastructure, Application Owners, Human Resources, IT Compliance, Information Security, and Internal Audit—to drive remediation efforts and strengthen governance processes.
• Provide IAM governance and compliance guidance for new technologies, system implementations, and enterprise initiatives.
• Analyze IAM and access governance data to validate completeness, accuracy, and compliance using Microsoft Excel and other reporting tools.
• Assist in evaluating and implementing IAM technologies that improve governance, compliance, and operational efficiency.
• Support incident response reviews and incorporate lessons learned into IAM control improvements.
• Develop dashboards, metrics, and executive reporting to communicate audit status, compliance performance, risks, and remediation progress.
• Contribute to the continuous improvement of IAM governance processes, documentation, and operational standards.

Qualifications

• Bachelor's degree in Computer Science, Information Technology, Cybersecurity, Information Systems, or a related discipline, or equivalent professional experience.
• 5+ years of experience in Identity and Access Management, Information Security, IT Audit, Risk Management, or Compliance within a large enterprise environment.
• Demonstrated experience supporting SOX, Internal Audit, external audit, regulatory assessments, and compliance activities related to Identity and Access Management.
• Experience managing audit findings, evidence collection, control testing, issue remediation, and audit response activities.
• Strong understanding of Identity Governance and Administration (IGA), access controls, user access reviews, identity lifecycle management, and IAM governance best practices.
• Working knowledge of security and compliance frameworks including SOX, NIST, HIPAA, GDPR, HITRUST, PCI-DSS, SOC 1, and SOC 2.
• Advanced analytical and problem-solving skills with exceptional attention to detail.
• Strong communication and relationship management skills with the ability to effectively engage both technical and non-technical stakeholders.
• Advanced Microsoft Excel skills, including Pivot Tables, Power Query, data analysis, and reporting.

Preferred Qualifications

• Experience with SailPoint IdentityIQ or IdentityNow.
• Experience with Governance, Risk, and Compliance (GRC) platforms such as ServiceNow GRC, AuditBoard, or Archer.
• Familiarity with Active Directory, Microsoft Entra ID (Azure Active Directory), and ServiceNow.
• Professional certifications such as:
• Certified Information Systems Auditor (CISA)
• Certified Information Security Manager (CISM)
• Certified Information Systems Security Professional (CISSP)
• Certified in Risk and Information Systems Control (CRISC)
• Certified Identity and Access Manager (CIAM
• Technical Skills

• Identity Governance & Administration (IGA)
• IAM Audit & Compliance
• Identity Lifecycle Management (Joiner, Mover, Leaver)
• User Access Reviews & Access Certification Programs
• Segregation of Duties (SoD)
• Privileged Access Governance Concepts
• IAM Controls & Governance
• IT Risk Management
• Regulatory Compliance
• Control Testing & Evidence Management
• Policy Development & Documentation
• Root Cause Analysis
• Process Improvement
• Reporting & Executive Dashboards

Technology Experience

Experience with one or more of the following technologies is preferred:

• SailPoint IdentityIQ or IdentityNow
• Microsoft Entra ID (Azure Active Directory)
• Active Directory
• ServiceNow and ServiceNow GRC
• AuditBoard
• Archer GRC
• Microsoft Excel (Advanced)
• Microsoft Power BI
• Microsoft Office Suite