IT Compliance & Audit Analyst

This list is intended to reflect the current job but there may be additional essential functions (and certainly non-essential job functions) that are not referenced. Your community of practice or your Managers/Leaders will iterate on the job or require other tasks be performed whenever it is deemed appropriate to do so, observing, of course, any legal obligations including any collective bargaining obligations. Identity Lifecycle Management: Manage the lifecycle of user identities, including provisioning, de-provisioning, and role-based access control. User Provisioning and De-provisioning: Assist in the processes for user account creation, modification, and termination, ensuring timely and secure access for employees and contractors. Compliance and Reporting: Ensure adherence to identity management standards and provide regular reports on identity management practices and compliance to stakeholders. Analytical Thinking: Dissect complex data to identify and mitigate security threats. Problem-Solving: Quickly address and resolve security incidents and vulnerabilities. Attention to Detail: Ensure accurate monitoring, analysis, and documentation of security events. Communication: Clearly convey technical information to stakeholders and document incidents. Teamwork and Collaboration: Work well in a team and coordinate efforts during security activities. Audit and Compliance: Support the execution of regular audits of access controls and directory services to ensure compliance with internal policies and external regulations. Assist in addressing any identified issues or gaps. Incident Response and Troubleshooting: Assist in the response to and resolution of access-related security incidents and service requests. Support the troubleshooting and resolution of issues related to user access and directory services. Collaboration: Work closely with end users to troubleshoot issues, and provide clear guidance, while ensuring a postitive and efficient support experience End User Training: Develop training for end users, focusing on Identity Lifecycle Management and Application Access best practices. ALL YOU’LL NEED FOR SUCCESS

Bachelor’’s degree in Computer Science, Computer Engineering, Technology, Information Systems (CIS/MIS), Engineering, or a related technical discipline, or equivalent experience/training. 5+ years experience in a closely related role Preferred Qualifications- Education & Prior Job Experience Bachelor’s degree in Information Technology, Computer Science, Cybersecurity, or a related field; advanced degree preferred. Understanding of IAM technologies and protocols (such as SAML, OAuth, LDAP, IGA, MFA and PAM) Experience with technologies and concepts such as SSO, RBAC, directory services, certificates and secrets management. Familiarity with cloud platforms (e.g., AWS, Azure, Google Cloud) and their security features. Knowledge of regulatory compliance and industry standards (e.g., GDPR, PCI-DSS, ISO 27001). Top Requirements: Bachelor’s degree in information systems, Computer Science, Cybersecurity, Risk Management, or a related field. Experience in IT Audit, SOX Compliance, IT Risk Management, Access Governance, or Information Security. Experience performing IT ITAC, access management, change management, and SDLC control testing, along with strong Microsoft Excel skills. Nice to Have Skills: Experience with Saviynt, SailPoint, or other Identity Governance solutions. Experience with SAP, Workday, Oracle, Active Directory, AWS, Azure, Google Cloud Platform, and database technologies. Knowledge of NIST, COBIT, ISO 27001, and COSO frameworks. Professional certifications such as CISA, CRISC, or CISSP.

Our benefits package includes:

• Comprehensive medical benefits
• Competitive pay, 401(k)
• Retirement plan
• and much more!