Identity Governance and Security Posture Analyst (Remote)

is seeking an Identity Governance and Security Posture Analyst to help a customer maximize the value of its identity governance and administration platforms. This role will review platform findings, investigate excessive or inappropriate access, tune governance rules and recommendations, coordinate remediation, and translate technical findings into practical governance actions.

The analyst will work across identity governance, entitlement management, access certification, identity security posture management, lifecycle automation, and operational remediation., * Serve as a primary user of Saviynt and related identity governance or identity security posture management capabilities.

• Review platform recommendations and findings involving overprivileged access, excessive entitlements, orphaned identities, stale access, toxic combinations, policy violations, and identity lifecycle exceptions.
• Evaluate the operational impact of identity and access findings, validate findings with appropriate owners, and recommend remediation actions.
• Tune rules, thresholds, policies, correlation logic, roles, entitlements, and recommendations to improve platform findings.
• Support access reviews, entitlement reviews, role analysis, segregation of duties reviews, exception handling, and remediation tracking.
• Analyze identity and entitlement relationships across Saviynt, Active Directory, Microsoft Entra ID, privileged access management platforms, business applications, HR systems, and other connected sources.
• Help define and improve identity governance standards, ownership models, approval requirements, lifecycle controls, and evidence expectations.
• Identify opportunities to improve joiner, mover, and leaver automation; access-request workflows; certification campaigns; and governance reporting.
• Translate platform findings into change requests, remediation tickets, process updates, control enhancements, and implementation recommendations.
• Partner with identity architects, IAM leaders, data analysts, compliance analysts, application owners, HR, audit, and security teams.
• Track remediation progress, exceptions, aging findings, risk acceptance, repeat findings, and unresolved ownership decisions.
• Produce metrics and leadership reporting related to governance posture, remediation status, access risk, and platform adoption.
• Document platform configurations, rule logic, analysis decisions, operating procedures, and recommended improvements.
• Evaluate new identity governance and identity security posture management capabilities and integrations.

This is a remote opportunity for candidates located within the United States. Candidates must be able to work Central Time hours., * 5+ years of experience in identity governance, access governance, cybersecurity, IAM operations, IT risk, or a related discipline.

• Hands-on Saviynt experience.
• Strong understanding of enterprise identity governance concepts, including accounts, identities, entitlements, roles, access requests, certifications, approvals, exceptions, segregation of duties, and identity lifecycle management.
• Ability to interpret entitlement and access data, investigate risk findings, validate ownership, and recommend remediation.
• Experience working with application owners, business owners, access approvers, audit/compliance, security, and technology teams.
• Ability to distinguish actionable risk from false positives and explain recommendations in business and technical terms.
• Strong documentation, analytical, follow-up, and stakeholder management skills.
• Ability to work remotely within the U.S. during Central Time hours.
• Must be a U.S. Citizen or Green Card holder., * Saviynt experience involving identity governance, access requests, access certifications, role and entitlement modeling, workflows, analytics, policy rules, or reporting.
• Experience with SailPoint, Microsoft Entra ID Governance, CyberArk, BeyondTrust, or identity security posture management capabilities.
• Experience with PowerShell, SQL, Python, APIs, connectors, data reconciliation, or workflow troubleshooting.
• Experience supporting SOX controls, ITGC, NERC CIP requirements, critical infrastructure environments, or other regulated identity programs.
• Saviynt, SailPoint, Microsoft, CISA, CRISC, CISSP, CISM, or comparable certifications.