IAM Governance Analyst - IAM, Cybersecurity, SOP, Okta, SailPoint

IAM Governance Analyst - IAM, Cybersecurity, SOP, Okta, SailPoint - Remote

A large global organisation are in search of a IAM Governance Analyst to be responsible for overseeing the governance, risk, and compliance aspects of Identity and Access Management (IAM) internally. This person will ensure that access controls, policies, and procedures are aligned with regulatory requirements and industry best practices.

This will be an initial 3 months contract with the opportunity for extensions.

This position can be worked remotely with some possible on-site visits to London.

Key Responsibilities:

Governance and Compliance:

• Help, implement, and maintain IAM policies, standards, and procedures to ensure compliance with regulatory requirements (eg, GDPR, SOX, HIPAA, PCI-DSS).
• Help, implement and maintain IAM Standard Operating Procedures (SOP)
• Map IAM Controls to the IAM Standards and Policies.
• Conduct regular audits and assessments of IAM processes to identify gaps and recommend improvements.

• Oversee user access reviews, including role-based access control (RBAC) and entitlement reviews, to ensure appropriate access levels are maintained.
• Collaborate with IT and business units to define and maintain user roles, permissions, and access rights.

• Identify and mitigate risks related to identity and access management.
• Perform risk assessments and provide recommendations to reduce exposure to unauthorized access and data breaches.

• Generate and maintain detailed reports on IAM governance activities, including audit findings, compliance status, and risk assessments.
• Document IAM processes, controls, and procedures to ensure transparency and accountability.

• 3+ years of experience in IAM governance, cybersecurity, or IT risk management.
• Proven experience with IAM tools and platforms such as SailPoint, Okta, Microsoft Azure AD, ForgeRock
• Strong understanding of regulatory frameworks and compliance requirements.
• Experience conducting audits, risk assessments, and access reviews.